DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0aab2b38fc698b23351f1d07d7c3f299_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0aab2b38fc698b23351f1d07d7c3f299_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0aab2b38fc698b23351f1d07d7c3f299_JaffaCakes118
Size
37KB
MD5
0aab2b38fc698b23351f1d07d7c3f299
SHA1
859dec9624998164e385dfea7ec8ae0046994a20
SHA256
a4c1c405a69abd48183673e41e8acd17940d70a21d0a799e86d346d10748d3c6
SHA512
c3f8a5f2cb27656cd455b42feb4703e415360fda7bd2c15954f46ec3778f37bac5fc198568aea98643eba7a333aa68c3367298350e1bc4084f03c27635177d58
SSDEEP
384:yT1knCymBN85JjMsvHniDJlLQ3TDFhHV26IdibJO/bLuOUmqpzalSutP2dYOFr4L:WSCyKN84svHiDfQ3/fV2hwJOisKdnILz
Checks for missing Authenticode signature.
resource |
---|
0aab2b38fc698b23351f1d07d7c3f299_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
realloc
??2@YAPAXI@Z
__CxxFrameHandler
_purecall
free
wcscat
_wcsicmp
swprintf
wcslen
wcscpy
malloc
_adjust_fdiv
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_except_handler3
??3@YAXPAX@Z
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
CreatePropertySheetPageW
GetSystemWindowsDirectoryW
GetVersionExW
InterlockedIncrement
LoadLibraryExW
GetLastError
FindResourceW
InterlockedDecrement
lstrcmpiW
lstrcpynW
lstrcatW
GetModuleFileNameW
FreeLibrary
GetProcAddress
HeapDestroy
LoadLibraryW
DisableThreadLibraryCalls
lstrlenA
SizeofResource
GetShortPathNameW
MultiByteToWideChar
lstrlenW
lstrcpyW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LoadResource
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
SysAllocString
VarUI4FromStr
LoadTypeLi
SysFreeString
RegisterTypeLi
GetWindowLongW
GetParent
SendMessageW
SetWindowTextW
GetDlgItem
GetWindowTextW
CharNextW
SetWindowLongW
SetupFindFirstLineW
SetupCloseInfFile
SetupOpenInfFileW
SetupGetInfFileListW
SetupCopyOEMInfW
SetupGetStringFieldW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ