DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
38e9a65de01d467af5234b7ba13a1740_JaffaCakes118.dll
Resource
win7-20241010-en
Target
38e9a65de01d467af5234b7ba13a1740_JaffaCakes118
Size
48KB
MD5
38e9a65de01d467af5234b7ba13a1740
SHA1
2c855a058cbc6da9e012f886540fe4fbf5b3218f
SHA256
ac80b3aa65a5f0fcbb3332fed4edb80e14fc368a25972bac7b5789dbc802673a
SHA512
791d890e074dd715718df38c817a5fff0c0670ab40928e222586b60dffd3e97092cb6f735b7e72c086e82b6531913581edc99c1955ea08e9f380867fbd13f816
SSDEEP
768:ddxjRxmF9hvXlVD4jZy3OtG4x9ticNgfXSUpwjN/kyAdqfwMLRfL:XZmVjGiGxtNgaUp4NkPkfBtf
Checks for missing Authenticode signature.
resource |
---|
38e9a65de01d467af5234b7ba13a1740_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
CreateProcessA
GetModuleFileNameA
GetSystemDirectoryA
CreateDirectoryA
GetProcAddress
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
LoadLibraryA
GetShortPathNameA
GetModuleHandleA
GetCurrentProcessId
WritePrivateProfileStringA
ExitProcess
CreateThread
FindNextFileA
GetPrivateProfileStringA
FindFirstFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
LocalFree
GetCommandLineW
MultiByteToWideChar
SetFileAttributesA
DeleteFileA
MoveFileA
Process32First
Process32Next
CloseHandle
WideCharToMultiByte
lstrlenW
HeapDestroy
GetNamedSecurityInfoA
RegQueryValueExA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
atoi
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
_wcslwr
wcsstr
strncmp
strncpy
strrchr
strcmp
_purecall
memcpy
memcmp
strlen
??3@YAXPAX@Z
strcpy
sprintf
strstr
??2@YAPAXI@Z
memset
_strupr
strchr
_access
strcat
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ