DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
40abdc31ee5d6bbe31a1a105d2b4c906_JaffaCakes118.dll
Resource
win7-20240903-en
Target
40abdc31ee5d6bbe31a1a105d2b4c906_JaffaCakes118
Size
60KB
MD5
40abdc31ee5d6bbe31a1a105d2b4c906
SHA1
b7e69489118b8990c294dab9876ea3f721d62986
SHA256
ac82d986032ebeb2163be86be40fe987d3d672a59da2e2b69cf75262b310f18d
SHA512
53cbceb81aaa157b229b398e3b1b6ae648f61a368398bbf67f068d919517cdfcb00b19eac4374cede60cdbc2d95a94bfd50ab97c3e7dbdca1d71462a4bcc2dad
SSDEEP
768:PFZepLukv4OF/nrIS4lCDGygH0c011da/Uvq/IMdWs7mDwQw7ZIPNz5zjXeynymS:tZe8kv42rINygUZdYm0iFx6mCjzTW4
Checks for missing Authenticode signature.
resource |
---|
40abdc31ee5d6bbe31a1a105d2b4c906_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GetCommandLineW
GetCurrentProcessId
Process32Next
Process32First
CreateThread
GetExitCodeProcess
WaitForSingleObject
GetSystemDirectoryA
LocalFree
Sleep
ExitProcess
GetPrivateProfileStringA
FindFirstFileA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
SetFileAttributesA
MoveFileA
WritePrivateProfileStringA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
FreeLibrary
GetModuleFileNameA
LoadLibraryA
GetProcAddress
DeleteFileA
RemoveDirectoryA
CreateDirectoryA
CreateProcessA
FindNextFileA
GetNamedSecurityInfoA
SetEntriesInAclA
SetNamedSecurityInfoA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
BuildExplicitAccessWithNameA
SHGetSpecialFolderPathA
CommandLineToArgvW
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysFreeString
memcmp
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
_purecall
atoi
fopen
fseek
ftell
??2@YAPAXI@Z
fread
fclose
strncmp
sprintf
??3@YAXPAX@Z
_access
strcat
strcpy
memset
wcsstr
_wcslwr
strlen
strstr
_strupr
memcpy
strcmp
strrchr
strncpy
strchr
SHDeleteValueA
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ