DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Uninstall
Static task
static1
Behavioral task
behavioral1
Sample
473cd31f0a6e1004c0fc0c1d68a59186_JaffaCakes118.dll
Resource
win7-20240705-en
Target
473cd31f0a6e1004c0fc0c1d68a59186_JaffaCakes118
Size
208KB
MD5
473cd31f0a6e1004c0fc0c1d68a59186
SHA1
3184838f36d27a5ba88d3734bea421bc4710da10
SHA256
fe7275a2294bd83da18ffd8060dbe94016c8daa65a83186fb6365b7326b759da
SHA512
479056ab7ac9d1046a9fe6df32c46514f2965d5cdafcf384cf606994f01293ff45cb969958ac1b2c6c4f231a1d3e209267037e95119cf65a84105be26aeb16d0
SSDEEP
3072:/vvGKJrMRWhF5kOqrt+jCCFFL6q2Csr6Ep/qccfsxVkq/wwgGjy:PGKJrMRmF5kOqrtyFV6hCb8/Asxe
Checks for missing Authenticode signature.
resource |
---|
473cd31f0a6e1004c0fc0c1d68a59186_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpynA
LocalFree
FreeResource
lstrlenW
InitializeCriticalSection
DeleteCriticalSection
lstrcpyA
lstrcatA
GetModuleFileNameA
MulDiv
DisableThreadLibraryCalls
LoadLibraryExA
lstrcmpiA
IsDBCSLeadByte
VirtualQuery
GetSystemInfo
VirtualProtect
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
FindResourceA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
TerminateProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsFree
GetCPInfo
GetOEMCP
ExitProcess
GetCommandLineA
TlsSetValue
CreateDirectoryA
GetFileAttributesA
LoadResource
LockResource
SizeofResource
ReadFile
SetFilePointer
CreateFileA
WriteFile
CloseHandle
GetCurrentThreadId
FreeLibrary
LoadLibraryA
MultiByteToWideChar
OutputDebugStringA
GetModuleFileNameW
SetLastError
LoadLibraryW
GetPrivateProfileStringA
HeapAlloc
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
GetModuleHandleW
GetLastError
GetModuleHandleA
InterlockedIncrement
GlobalLock
GlobalUnlock
GetProcessHeap
HeapFree
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
InterlockedDecrement
lstrlenA
WideCharToMultiByte
SetEndOfFile
HeapReAlloc
RaiseException
LCMapStringA
RtlUnwind
GetClientRect
GetWindowTextA
DefWindowProcA
SetWindowLongA
UnregisterClassA
GetWindowTextLengthA
SetWindowTextA
GetSystemMetrics
GetDC
GetDlgItem
ShowWindow
CharNextA
IsChild
BeginPaint
EndPaint
OffsetRect
DrawIconEx
GetSysColor
DrawEdge
DrawTextA
FillRect
ModifyMenuA
AppendMenuA
DestroyMenu
CreatePopupMenu
CreateMenu
wsprintfW
CreateIconFromResourceEx
CreateIconFromResource
MessageBoxA
LoadIconA
ReleaseDC
GetWindowLongA
IsWindow
CreateWindowExA
GetClassInfoExA
RegisterClassExA
LoadCursorA
wsprintfA
SetFocus
MapWindowPoints
MoveWindow
GetMenuItemInfoA
TrackPopupMenu
DestroyWindow
FindWindowExA
GetWindow
GetFocus
GetKeyState
TranslateMessage
DispatchMessageA
CallWindowProcA
SendMessageA
CreateDCA
GetDeviceCaps
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
SetTextAlign
TextOutA
GetTextExtentPoint32A
CreateBitmap
CreatePatternBrush
ExtTextOutA
CreatePen
CreateSolidBrush
CreateFontIndirectA
SetTextColor
SetBkMode
SetBkColor
SetBrushOrgEx
RestoreDC
DeleteObject
GetStockObject
DeleteDC
GetTextMetricsA
SelectObject
RegDeleteValueA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryInfoKeyA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ReleaseStgMedium
RegisterDragDrop
CoTaskMemFree
StringFromCLSID
CoCreateGuid
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
VarUI4FromStr
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysAllocStringLen
VariantClear
VariantInit
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysStringLen
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Uninstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ