DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
dbdc406992f1679760a0ce7a163d4b8d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbdc406992f1679760a0ce7a163d4b8d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dbdc406992f1679760a0ce7a163d4b8d_JaffaCakes118
Size
215KB
MD5
dbdc406992f1679760a0ce7a163d4b8d
SHA1
770a75eb9796199a4653d6e58f0ea9401f446612
SHA256
825b6e283ffef94cd63bccfaaa981ecfc28c199522dd703ad9a0f7eaf0a1dfb6
SHA512
a1a14ae6af07b7988b29e8f061cf756f447afd374906d4ded18d4f1cc208c94a12b565b03dda87f1eec8204f7adaf6a5224e24fe80489bacf45d81c0caa0819b
SSDEEP
3072:yIfY7TPD4cKtRc5BYOThnn00JSyiFl8UJMjQu26olN0erEyvBiJYYOJx1:bAcPtR2Thn00JDZUo7ovDFx
Checks for missing Authenticode signature.
resource |
---|
dbdc406992f1679760a0ce7a163d4b8d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
free
wcscat
malloc
wcsncpy
swscanf
towlower
wcscmp
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_purecall
swprintf
_wcsnicmp
_wcsicmp
_CxxThrowException
__CxxFrameHandler
wcscpy
sscanf
atol
sprintf
iswspace
_wtol
wcslen
??0ProvDebugLog@@QAE@PBG@Z
??1ProvDebugLog@@UAE@XZ
?WriteW@ProvDebugLog@@QAAXPBGZZ
CoCreateInstance
StringFromGUID2
SafeArrayAccessData
SysFreeString
SysAllocStringLen
VariantCopy
VariantChangeTypeEx
SafeArrayUnaccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayCreate
SafeArrayGetElement
SafeArrayPutElement
SafeArrayDestroy
SysAllocString
VariantInit
VariantClear
LoadLibraryA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
CreateMutexW
Sleep
GetSystemDirectoryW
lstrcatW
LoadLibraryExW
GetProcAddress
GetVersionExW
FreeLibrary
FileTimeToSystemTime
GetTimeZoneInformation
SystemTimeToFileTime
CompareFileTime
InterlockedIncrement
InterlockedDecrement
GetCurrentThread
CloseHandle
GetSystemTimeAsFileTime
LeaveCriticalSection
GetModuleFileNameW
InitializeCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
ord15
ord9
ord6
ord4
ord5
RegSetValueExW
RegCloseKey
GetTokenInformation
OpenThreadToken
RegCreateKeyExW
RegDeleteKeyW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ