DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a0debef07db56b74828374377374bc2b_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a0debef07db56b74828374377374bc2b_JaffaCakes118
Size
176KB
MD5
a0debef07db56b74828374377374bc2b
SHA1
da95be5d454f20e8612336e4097ed2d8d4f2f0ce
SHA256
4e9fbbb169bbb640e491a28ccc5406746c47bcd6bb50bcafe00891ec37d851f5
SHA512
14d1687e5bfe232b1e963b1b575a32160cc11c22cf184fc99dd553b912158f235cf965086b4a1c8381680ed4a54858fc1db50856c6977f7825416bd5b0dfbcd2
SSDEEP
3072:H+ztA/CPgLX0BIOhOoO9YLQpDOL6usHNPng5UWat5rk3sjz7gMsBC:H1LXkIaOJYcp6OusB5jXo307gM
Checks for missing Authenticode signature.
resource |
---|
a0debef07db56b74828374377374bc2b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PrintDlgA
ChooseFontA
CommDlgExtendedError
GetOpenFileNameA
ChooseColorA
PageSetupDlgA
GetSaveFileNameA
lstrcpyA
MulDiv
lstrlenW
HeapAlloc
GetProcAddress
VirtualAlloc
GlobalFree
GlobalAlloc
GlobalUnlock
HeapReAlloc
FreeLibrary
GetProcessHeap
InitializeCriticalSection
GetVersion
lstrlenA
DeleteCriticalSection
OpenFile
lstrcpynA
lstrcatA
GetModuleFileNameA
MultiByteToWideChar
GetWindowsDirectoryA
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
GetLocaleInfoA
HeapFree
WideCharToMultiByte
DisableThreadLibraryCalls
GlobalLock
lstrcmpA
CharNextA
MoveWindow
GetDC
DestroyWindow
wsprintfA
LoadStringA
GetWindowRect
UnregisterClassA
GetParent
ReleaseDC
IsWindow
GetSystemMetrics
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
RegCloseKey
RegDeleteValueA
RegQueryValueA
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
SafeArrayRedim
SafeArrayPutElement
UnRegisterTypeLi
SysFreeString
SysAllocString
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayDestroy
SafeArrayCreate
LoadTypeLi
RegisterTypeLi
VariantClear
VariantCopy
LoadTypeLibEx
SysAllocStringLen
OleCreateFontIndirect
CreateErrorInfo
LoadRegTypeLi
SetErrorInfo
GetDeviceCaps
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ