DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f1d2c208ddb6b209fa6ce895e69b90a1_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1d2c208ddb6b209fa6ce895e69b90a1_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f1d2c208ddb6b209fa6ce895e69b90a1_JaffaCakes118
Size
35KB
MD5
f1d2c208ddb6b209fa6ce895e69b90a1
SHA1
77883ee7005a962fd864d03b398a28046c3954f7
SHA256
3fe37ae4bb90fd181cf57750816f5b2c9362cd8e6f98995dfb40ceafcad5c6df
SHA512
b62d4873cd00c0521dea0a668b60fac9618c99d41dde69e48b366181d3d555aac2a32e2b32d53a80f5631fb7864ca385b05894c6a70cfbd734b49b9c8975a8b8
SSDEEP
768:2NpLZyKN84xZ36DSErHtkBwJOi34dnzuAiRo:EpLVNTOD5EwJ5CuAiRo
Checks for missing Authenticode signature.
resource |
---|
f1d2c208ddb6b209fa6ce895e69b90a1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
realloc
??2@YAPAXI@Z
__CxxFrameHandler
_purecall
free
wcscat
_wcsicmp
swprintf
wcslen
wcscpy
malloc
_adjust_fdiv
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_except_handler3
??3@YAXPAX@Z
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
CreatePropertySheetPageW
GetSystemWindowsDirectoryW
GetVersionExW
InterlockedIncrement
LoadLibraryExW
GetLastError
FindResourceW
InterlockedDecrement
lstrcmpiW
lstrcpynW
lstrcatW
GetModuleFileNameW
FreeLibrary
GetProcAddress
HeapDestroy
LoadLibraryW
DisableThreadLibraryCalls
lstrlenA
SizeofResource
GetShortPathNameW
MultiByteToWideChar
lstrlenW
lstrcpyW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LoadResource
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
SysAllocString
VarUI4FromStr
LoadTypeLi
SysFreeString
RegisterTypeLi
GetWindowLongW
GetParent
SendMessageW
SetWindowTextW
GetDlgItem
GetWindowTextW
CharNextW
SetWindowLongW
SetupFindFirstLineW
SetupCloseInfFile
SetupOpenInfFileW
SetupGetInfFileListW
SetupCopyOEMInfW
SetupGetStringFieldW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ