ServiceMain
CleanupNetMeetingDispDriverW
DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllRegisterServer
DllUnregisterServer
NewMediaPhone
OpenConfLink
VerifyUserInfo
Static task
static1
Behavioral task
behavioral1
Sample
4a5511973f18e4275dfbace9495c1360_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a5511973f18e4275dfbace9495c1360_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4a5511973f18e4275dfbace9495c1360_JaffaCakes118
Size
212KB
MD5
4a5511973f18e4275dfbace9495c1360
SHA1
3232aef9d47e5dcd6b28031f7a5bca2b9a4e9059
SHA256
e5f0dced68dde2eb7267a4d80bc380a76e811a49c940599cc26c46eb3e8f8865
SHA512
942c8ee1a89fd00fc1079e68856c726e1b4aba72b78db2c69785d4a13b4a386576353a6845ef90040ba4cd126e105fb3c69ee8f5e29a59d7eb9058de2bdcbbba
SSDEEP
3072:7g/XqMjltdY8Nyg+x9MaMVENi+BqMQw+Ge86chTiQLZpDeh/jpi7eP:U/FXrn+cvN+BNy8lxFpDE9i7
Checks for missing Authenticode signature.
resource |
---|
4a5511973f18e4275dfbace9495c1360_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
free
realloc
_wtoi64
_initterm
_adjust_fdiv
malloc
WideCharToMultiByte
lstrcpynA
lstrlenW
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
FormatMessageA
CloseHandle
ReadFile
GetFileSize
CreateFileA
CompareStringA
LeaveCriticalSection
EnterCriticalSection
lstrcmpiA
IsBadWritePtr
GetEnvironmentVariableA
VirtualAlloc
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetPrivateProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualProtect
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
GetShortPathNameA
GetSystemDirectoryA
Sleep
SetEvent
OpenEventA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalAlloc
LocalFree
GetStringTypeExA
SetErrorMode
GetFileAttributesA
WritePrivateProfileStringA
lstrcatA
GlobalFree
MultiByteToWideChar
lstrcmpA
lstrlenA
lstrcpyA
GetModuleFileNameA
RegQueryInfoKeyA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyA
RegFlushKey
RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegEnumValueA
CharNextA
EnableWindow
GetDlgItem
GetWindowTextA
EndDialog
PostMessageA
SetWindowLongA
GetWindowLongA
DialogBoxParamA
ChangeDisplaySettingsA
ChangeDisplaySettingsExA
EnumDisplayDevicesA
FindWindowA
PeekMessageA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
WinHelpA
SendMessageA
GetDlgItemTextA
MessageBoxA
LoadStringA
RegisterClipboardFormatA
wsprintfA
GetStockObject
CoCreateInstance
CoInitializeEx
CoTaskMemFree
CoGetClassObject
CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize
SysAllocString
VarUI4FromStr
LoadTypeLi
RegisterTypeLi
SysFreeString
SysAllocStringLen
LoadRegTypeLi
SysStringLen
SHGetMalloc
SHChangeNotify
DragQueryFileA
ServiceMain
CleanupNetMeetingDispDriverW
DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllRegisterServer
DllUnregisterServer
NewMediaPhone
OpenConfLink
VerifyUserInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ