DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3dc311896e5c531533fd74f16f6b6010_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3dc311896e5c531533fd74f16f6b6010_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3dc311896e5c531533fd74f16f6b6010_JaffaCakes118
Size
52KB
MD5
3dc311896e5c531533fd74f16f6b6010
SHA1
72d5e2a6f860593286347d96142cb424210a5f44
SHA256
10608c66ff06616881118038387feda30cac79f0fb19d126d887720b362cca58
SHA512
ab58acb5cc10fa2a641291dcd1314a312046a8ff4813dadd0f05509a7f18647c067fa936a7e45f3a8203f80659bc9be4d6e0e4bc61b019b8f28303cb2c6ebd66
SSDEEP
1536:+HtFdyC6natEcR76pKWOOqpcRQyILzGzN:MdyCpLmpKWeyIniN
Checks for missing Authenticode signature.
resource |
---|
3dc311896e5c531533fd74f16f6b6010_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
Sleep
CreateDirectoryA
WritePrivateProfileStringA
FreeLibrary
FindNextFileA
GetPrivateProfileStringA
DisableThreadLibraryCalls
CreateProcessA
RemoveDirectoryA
GetSystemDirectoryA
GetExitCodeProcess
WaitForSingleObject
ExitProcess
GetCommandLineW
CreateThread
MoveFileA
GetCurrentProcessId
DeleteFileA
EnterCriticalSection
LeaveCriticalSection
SetFileAttributesA
LocalFree
Process32First
Process32Next
CloseHandle
GetModuleFileNameA
WideCharToMultiByte
lstrlenW
lstrlenA
MultiByteToWideChar
GetProcAddress
LoadLibraryA
FindFirstFileA
RegSetValueExA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegDeleteKeyA
RegCreateKeyExA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
sprintf
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
strncmp
strncpy
_wcslwr
wcsstr
_access
_purecall
strcat
fopen
fseek
??3@YAXPAX@Z
strstr
memcmp
memcpy
atoi
strchr
strcpy
strcmp
strrchr
strlen
_strupr
fclose
fread
memset
??2@YAPAXI@Z
ftell
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ