DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
431b6a72d60a1841cd372751c12660ed_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
431b6a72d60a1841cd372751c12660ed_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
431b6a72d60a1841cd372751c12660ed_JaffaCakes118
Size
35KB
MD5
431b6a72d60a1841cd372751c12660ed
SHA1
bd9c8594788f6e9492bfbe8427048650a29227b2
SHA256
57e4748497702086b61812e301b69bf0333726fb7e89cf1c51133ffb935977ba
SHA512
ba7ae3cf1667d479ebee2867225d3915821a6b546852d82099c409aaf4a533c01ac0383106346031b01c7fb13254eb5a20ed34c2471b9d884b702e690b7ba07a
SSDEEP
768:HSCyKN84svHiDfQ3/fV2hwJOisKdnILAj:y8NSwfy/NqwJ5O0j
Checks for missing Authenticode signature.
resource |
---|
431b6a72d60a1841cd372751c12660ed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
realloc
??2@YAPAXI@Z
__CxxFrameHandler
_purecall
free
wcscat
_wcsicmp
swprintf
wcslen
wcscpy
malloc
_adjust_fdiv
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_except_handler3
??3@YAXPAX@Z
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
CreatePropertySheetPageW
GetSystemWindowsDirectoryW
GetVersionExW
InterlockedIncrement
LoadLibraryExW
GetLastError
FindResourceW
InterlockedDecrement
lstrcmpiW
lstrcpynW
lstrcatW
GetModuleFileNameW
FreeLibrary
GetProcAddress
HeapDestroy
LoadLibraryW
DisableThreadLibraryCalls
lstrlenA
SizeofResource
GetShortPathNameW
MultiByteToWideChar
lstrlenW
lstrcpyW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LoadResource
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
SysAllocString
VarUI4FromStr
LoadTypeLi
SysFreeString
RegisterTypeLi
GetWindowLongW
GetParent
SendMessageW
SetWindowTextW
GetDlgItem
GetWindowTextW
CharNextW
SetWindowLongW
SetupFindFirstLineW
SetupCloseInfFile
SetupOpenInfFileW
SetupGetInfFileListW
SetupCopyOEMInfW
SetupGetStringFieldW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ