DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1973e180788882dcf50b08bab183ee24_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1973e180788882dcf50b08bab183ee24_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1973e180788882dcf50b08bab183ee24_JaffaCakes118
Size
35KB
MD5
1973e180788882dcf50b08bab183ee24
SHA1
2e924312af9c3d66dc70087ea710659b34efa1c9
SHA256
199f92ab7a4720ab66786eb9681cffc4dc831e72fee9cba83a7a8d888d1670a1
SHA512
3e81f0a0fe04281a955cef0f7b1ae1ea6359491ab4b1f8e9ec5254d259ffabbeccdcb925ea034dbacf4cc80e9e051a8c00beda5a427cb0c82d8d3256480b183b
SSDEEP
384:y+1knCymBN85JjMsvHniDJlLQ3TDFhHV26IdibJO/bLuOUmqpzalSutP2dYOFr44:HSCyKN84svHiDfQ3/fV2hwJOisKdnILw
Checks for missing Authenticode signature.
resource |
---|
1973e180788882dcf50b08bab183ee24_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
realloc
??2@YAPAXI@Z
__CxxFrameHandler
_purecall
free
wcscat
_wcsicmp
swprintf
wcslen
wcscpy
malloc
_adjust_fdiv
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_except_handler3
??3@YAXPAX@Z
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
CreatePropertySheetPageW
GetSystemWindowsDirectoryW
GetVersionExW
InterlockedIncrement
LoadLibraryExW
GetLastError
FindResourceW
InterlockedDecrement
lstrcmpiW
lstrcpynW
lstrcatW
GetModuleFileNameW
FreeLibrary
GetProcAddress
HeapDestroy
LoadLibraryW
DisableThreadLibraryCalls
lstrlenA
SizeofResource
GetShortPathNameW
MultiByteToWideChar
lstrlenW
lstrcpyW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LoadResource
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
SysAllocString
VarUI4FromStr
LoadTypeLi
SysFreeString
RegisterTypeLi
GetWindowLongW
GetParent
SendMessageW
SetWindowTextW
GetDlgItem
GetWindowTextW
CharNextW
SetWindowLongW
SetupFindFirstLineW
SetupCloseInfFile
SetupOpenInfFileW
SetupGetInfFileListW
SetupCopyOEMInfW
SetupGetStringFieldW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ