DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
55470028ca7bfeaf32c635a3e7261675_JaffaCakes118.dll
Resource
win7-20240903-en
Target
55470028ca7bfeaf32c635a3e7261675_JaffaCakes118
Size
52KB
MD5
55470028ca7bfeaf32c635a3e7261675
SHA1
8df1ea99032ad1f3a5702d05d4fb23ee0cb5f4be
SHA256
a76b0563867b1565f9279a369d8e0ce6fb3df21f7842300d9f80a95c294cab42
SHA512
1ad2d51d5a6a418670748efdb82cf6e13d75e3d23978f580d653bacf8af79adec253c753bed4299a63cc78aff7c8c76ae46ff9331a976052c35b29570462416a
SSDEEP
1536:P/DRpPIwBbn+SdC8lCRIIrtGK6kOZ9ovVX:P/LTB08ARIIrtqZqVX
Checks for missing Authenticode signature.
resource |
---|
55470028ca7bfeaf32c635a3e7261675_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindFirstFileA
GetCommandLineW
WideCharToMultiByte
lstrlenW
FreeLibrary
CreateThread
Process32Next
Process32First
LocalFree
GetCurrentProcessId
LeaveCriticalSection
GetPrivateProfileStringA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
ExitProcess
FindNextFileA
SetFileAttributesA
DeleteFileA
MoveFileA
LoadLibraryA
GetProcAddress
lstrlenA
MultiByteToWideChar
CreateDirectoryA
Sleep
WritePrivateProfileStringA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
EnterCriticalSection
RegEnumKeyExA
RegSetValueExA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
RegDeleteKeyA
RegCreateKeyExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoUninitialize
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
_wcslwr
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
_purecall
fopen
fseek
ftell
??2@YAPAXI@Z
fread
fclose
atoi
memcpy
memset
sprintf
??3@YAXPAX@Z
_access
strcat
strlen
strstr
strrchr
wcsstr
_strupr
strncpy
strchr
strncmp
strcpy
memcmp
strcmp
SHDeleteKeyA
SHSetValueA
DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ