DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
37cff0b89e377c5b0d69efbbab9b15a0_JaffaCakes118.dll
Resource
win7-20240903-en
Target
37cff0b89e377c5b0d69efbbab9b15a0_JaffaCakes118
Size
56KB
MD5
37cff0b89e377c5b0d69efbbab9b15a0
SHA1
b3870a0ed733daf1faa46ac86f3ba152c1d116cc
SHA256
663195421288535d0748e333f7d0097e2136e6a917caab13865c96b5e70a223c
SHA512
7c09b662bcc5838cfad8cd77712eb64137d42d788faf4f8b9cdf354bcb8cb487329ac91f130ed534200c923984643b11935640e0c69dbb5065c3395107c8e39b
SSDEEP
1536:7F68jxT2XSJTuBJe/RIIFm9EjM/KunRG:tjxIw6u/WIFmCM/vn
Checks for missing Authenticode signature.
resource |
---|
37cff0b89e377c5b0d69efbbab9b15a0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalFree
CloseHandle
GetSystemDirectoryA
CreateDirectoryA
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
CreateThread
GetExitCodeProcess
WaitForSingleObject
Sleep
GetCommandLineW
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
Process32Next
Process32First
ExitProcess
CreateProcessA
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
FindNextFileA
DeleteFileA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetProcAddress
GetModuleFileNameA
WritePrivateProfileStringA
LoadLibraryA
FreeLibrary
MoveFileA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoGetInterfaceAndReleaseStream
CoInitialize
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoUninitialize
SysFreeString
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SHSetValueA
SHDeleteValueA
SHDeleteKeyA
fread
_strupr
_stricmp
_adjust_fdiv
malloc
_initterm
free
_purecall
_wcslwr
wcsstr
memcpy
strncmp
strncpy
strcmp
_access
strcpy
strchr
atoi
strstr
strrchr
sprintf
memset
strlen
memcmp
??3@YAXPAX@Z
fclose
_strlwr
??2@YAPAXI@Z
ftell
fseek
fopen
strcat
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ