CPlApplet
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c1d1c293e38d0bb1778e3990c13a2e8e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c1d1c293e38d0bb1778e3990c13a2e8e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c1d1c293e38d0bb1778e3990c13a2e8e_JaffaCakes118
Size
39KB
MD5
c1d1c293e38d0bb1778e3990c13a2e8e
SHA1
5fc3a15284660ba87d36a968ac29e96a0979d101
SHA256
2f60fd1e5078126e1859004ea3c4a32f567ebd613e30296925c03fa365f17c4a
SHA512
cdda2da9300d70ae5af66b987493b1b946f9b442191bbf4be4d1531bf3de41223f04f52633aa692fa51f65cfb3b1f5787213448340a74419f926c609b6297ac2
SSDEEP
768:clzeOVH9RyRMHFksPHrPS958GrF/hkanU0aQ/974q+D9P2unD6mHDxREzHu8XZCa:cde8dR9Pm8GrF/rFaQu5RDLeHT0a
Checks for missing Authenticode signature.
resource |
---|
c1d1c293e38d0bb1778e3990c13a2e8e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
_initterm
_snprintf
sprintf
strrchr
malloc
free
memcmp
memcpy
memset
_except_handler3
_strupr
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
KillTimer
DefWindowProcA
wsprintfA
IsWindowVisible
GetWindowThreadProcessId
PostMessageA
SetTimer
SendMessageA
UnhookWinEvent
SetWinEventHook
GetClassNameA
CallWindowProcA
SetSecurityDescriptorDacl
RegSetValueA
RegDeleteValueA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
Sleep
GetTempPathA
GetTempFileNameA
CreateMutexA
GetLastError
GetCurrentProcessId
OpenMutexA
GetStartupInfoA
CreateProcessA
DisableThreadLibraryCalls
ExpandEnvironmentStringsA
WaitForSingleObject
SetErrorMode
GetFileAttributesExA
CopyFileA
CreateDirectoryA
lstrcatA
GetFileAttributesA
MultiByteToWideChar
GetModuleFileNameA
DeleteFileA
TerminateProcess
FreeResource
LoadResource
SizeofResource
FindResourceA
GetProcessHeap
CompareStringA
GetThreadLocale
lstrcpynA
FreeLibrary
ExitThread
HeapAlloc
lstrcmpA
lstrcmpiA
IsBadReadPtr
lstrcatW
QueryDosDeviceW
GetModuleFileNameW
lstrlenA
lstrcpyA
GetProcAddress
HeapFree
CreateThread
IsBadWritePtr
GetModuleHandleA
LoadLibraryA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
IsBadStringPtrA
VirtualFree
VirtualAlloc
WriteFile
CreateFileA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetTickCount
GetVolumeInformationA
GetSystemDirectoryA
OpenProcess
CPlApplet
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ