CopyTo
Define
DefineW
IsCopyToAvail
IsDefineAvail
IsLookupReferenceAvail
LookupReference
LookupReferenceW
OnRemove
OnSetup
_InitPowerPoint@4
Static task
static1
Behavioral task
behavioral1
Sample
b7d5b8af8760bf49d6473fe0b569d6a3_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b7d5b8af8760bf49d6473fe0b569d6a3_JaffaCakes118
Size
255KB
MD5
b7d5b8af8760bf49d6473fe0b569d6a3
SHA1
ee5028635f09e1da45e126024295b2d0a2f5feed
SHA256
0318d5c2f6ead5da9946b510051acae9fe3f64e763cf1d9b86e51a4be605a0cb
SHA512
c277f9dd27ca32870e86b94cd83287b6b1cbe4ac0850bc4e4031936168016929d8c41482315bce42f7056d85a94dfb62de64edade84c78db6e8023fb0f9c4cd7
SSDEEP
6144:s+wLfh2YnKeR00gCcjgaRWDADMMMMMMMMMMmjMMMMMMMMMMMMol96ZmjMMMMMMM0:gLf3KlFjzMMMMMMMMMMMMMMMMMMMMMM3
Checks for missing Authenticode signature.
resource |
---|
b7d5b8af8760bf49d6473fe0b569d6a3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
SetErrorMode
lstrcmpiA
GetSystemDefaultLangID
OpenFile
GetLastError
WinExec
AreFileApisANSI
GetVolumeInformationA
GetModuleFileNameA
FindResourceA
SetLastError
WideCharToMultiByte
lstrcatA
GetVersion
CreateProcessA
FreeResource
LockResource
LoadResource
FlushFileBuffers
HeapSize
HeapReAlloc
lstrcmpA
GetDriveTypeA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetOEMCP
TlsGetValue
GetCPInfo
DeleteCriticalSection
GetStartupInfoA
GetStdHandle
GetFileType
SetHandleCount
lstrlenA
MultiByteToWideChar
lstrcpyA
CloseHandle
SetStdHandle
SetFilePointer
LoadLibraryA
GetACP
HeapAlloc
TlsFree
HeapDestroy
TlsAlloc
TlsSetValue
HeapCreate
GetCurrentProcess
TerminateProcess
ExitProcess
GetStringTypeW
GetStringTypeA
GetModuleHandleA
HeapFree
RtlUnwind
GetCurrentThreadId
GetProcAddress
GetCommandLineA
SetFocus
SetWindowPos
GetParent
MessageBoxA
wsprintfA
GetWindowRect
FindWindowA
SetForegroundWindow
WaitForInputIdle
DialogBoxParamA
LoadCursorA
SetCursor
CallWindowProcA
SetWindowLongA
CharToOemA
IsCharAlphaNumericA
GetWindowLongA
LoadStringA
SetWindowTextA
EndDialog
EnableWindow
GetDlgItem
SendMessageA
SendDlgItemMessageA
GetWindowTextLengthA
GetWindowTextA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
ShellExecuteExA
SHGetSpecialFolderLocation
SHGetPathFromIDList
SHFileOperationA
CoCreateInstance
CLSIDFromProgID
OleUninitialize
OleInitialize
VariantInit
SysStringLen
SysAllocStringLen
VariantClear
SysAllocString
VariantCopy
GetActiveObject
SysFreeString
VariantChangeType
CopyTo
Define
DefineW
IsCopyToAvail
IsDefineAvail
IsLookupReferenceAvail
LookupReference
LookupReferenceW
OnRemove
OnSetup
_InitPowerPoint@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ