DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
566d0a6e40f15a78486689aa926ce3be_JaffaCakes118.dll
Resource
win7-20240903-en
Target
566d0a6e40f15a78486689aa926ce3be_JaffaCakes118
Size
36KB
MD5
566d0a6e40f15a78486689aa926ce3be
SHA1
2184a6a1e665b20d6d209f01999c9e594729ce00
SHA256
d82f993c9397c48b0cda8d4ffcb62bd3093185ba10b3408e1948bf8eaefe003c
SHA512
44fde94eff6ea3eb822b7c9952f9cdd0d2922001983e88fa5bdeabe1bb6b8dfe749df3addf1d11e04e27225dcb2fcbf6f40fc15297ca0ff11f221fe932e01a80
SSDEEP
768:+xrRsajBiXxSsKparZwAhxoSO4LtCVVYP4Ak:+xrSRXYs5btOOY3HAk
Checks for missing Authenticode signature.
resource |
---|
566d0a6e40f15a78486689aa926ce3be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
SetFileAttributesA
MultiByteToWideChar
CreateThread
Sleep
lstrlenA
lstrlenW
WideCharToMultiByte
FreeLibrary
LoadLibraryA
MoveFileA
GetCurrentProcessId
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
GetCommandLineW
Process32Next
Process32First
CreateToolhelp32Snapshot
FindNextFileA
FindFirstFileA
EnterCriticalSection
LeaveCriticalSection
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
WaitForSingleObject
CloseHandle
ExitProcess
GetExitCodeProcess
SetWindowTextA
SendMessageA
FindWindowExA
IsWindow
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
CommandLineToArgvW
SHGetSpecialFolderPathA
CoCreateInstance
CoInitialize
SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString
_stricmp
_strupr
_strlwr
_adjust_fdiv
malloc
_initterm
free
strcat
_wcslwr
wcsstr
strcpy
_purecall
strrchr
memcpy
memcmp
strlen
??2@YAPAXI@Z
memset
sprintf
??3@YAXPAX@Z
strstr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ