dialog
initDialog
show
Overview
overview
3Static
static
30e74a0eb4d...18.exe
windows7-x64
30e74a0eb4d...18.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
0e74a0eb4d6b30cbd5ecb171ca130199_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0e74a0eb4d6b30cbd5ecb171ca130199_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/QQPinyinHelper.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/QQPinyinHelper.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Target
0e74a0eb4d6b30cbd5ecb171ca130199_JaffaCakes118
Size
327KB
MD5
0e74a0eb4d6b30cbd5ecb171ca130199
SHA1
29cd5538af7bcad3776d024f05120f22f5da14c8
SHA256
b67ba427d4a44d4affa2578b21ab6dcc4239dba58c1581b4a45594356c974cb8
SHA512
531dd4dfc085af4e873791ba546bcf56b3097c017fe9dd87ea56023bda7be375c9ac6adcbc790070ddd3dd37168ccdc353824d85db7947b4def844915873ac23
SSDEEP
6144:qtYDP41ckmT+h5a5B/MfX3mqjK0wZzXbIZzchzoEEoCCADTVcdUDqJ6k5XorNZRw:kePJkC+h5EBEfX360wZg9AENCGWEqgkJ
Checks for missing Authenticode signature.
resource |
---|
0e74a0eb4d6b30cbd5ecb171ca130199_JaffaCakes118 |
unpack001/$PLUGINSDIR/InstallOptions.dll |
unpack001/$PLUGINSDIR/System.dll |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetCurrentDirectoryW
GetCurrentDirectoryW
GlobalUnlock
GetPrivateProfileIntW
lstrcmpiW
GetModuleHandleW
GetPrivateProfileStringW
lstrcatW
WritePrivateProfileStringW
lstrlenW
lstrcpyW
GlobalFree
GlobalAlloc
GlobalLock
lstrcpynW
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
SetWindowLongW
GetClientRect
SetWindowRgn
LoadIconW
LoadImageW
CreateWindowExW
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamW
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
LoadCursorW
SetCursor
DrawTextW
GetWindowLongW
DrawFocusRect
CallWindowProcW
PostMessageW
CharNextW
wsprintfW
MessageBoxW
GetWindowTextW
SetWindowTextW
SendMessageW
DestroyIcon
SetTextColor
CreateCompatibleDC
GetObjectW
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
SHBrowseForFolderW
SHGetDesktopFolder
SHGetPathFromIDListW
ShellExecuteW
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
CoTaskMemFree
dialog
initDialog
show
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
c:\Program Files\NSIS\plugins\QQPinyinHelper.pdb
WTSFreeMemory
WTSQuerySessionInformationW
ImmGetIMEFileNameW
ImmInstallIMEW
ImmIsIME
ImmGetDescriptionW
ExpandEnvironmentStringsW
CreateToolhelp32Snapshot
GetCurrentProcessId
RemoveDirectoryW
MoveFileExW
Sleep
GetFullPathNameW
QueryPerformanceCounter
WideCharToMultiByte
OpenProcess
TerminateProcess
GetPrivateProfileIntW
CreateFileMappingW
MapViewOfFileEx
OpenFileMappingW
UnmapViewOfFile
GetCPInfo
IsDBCSLeadByte
GetTickCount
SetFileAttributesW
GlobalLock
GlobalUnlock
Module32FirstW
Module32NextW
GetACP
GetTimeZoneInformation
GetCurrentDirectoryA
GetModuleFileNameA
GetStdHandle
HeapCreate
LCMapStringW
DeviceIoControl
IsValidCodePage
GetOEMCP
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetCommandLineA
ExitProcess
GetModuleHandleA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
InterlockedExchange
HeapSize
HeapReAlloc
ProcessIdToSessionId
HeapDestroy
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
RtlUnwind
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
QueryDosDeviceW
GetLogicalDrives
GetFileSize
CreateFileW
SetFilePointer
WriteFile
ReadFile
GetProcessHeap
HeapAlloc
GetConsoleOutputCP
FindNextFileW
GetFileAttributesW
DeleteFileW
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
MulDiv
RaiseException
SetLastError
FlushInstructionCache
CopyFileW
CreateDirectoryW
LocalFree
FindClose
FindFirstFileW
GetDriveTypeW
CloseHandle
lstrlenW
lstrcpynW
GetSystemDefaultLangID
GetSystemInfo
GetModuleHandleW
GetLocaleInfoW
GetCurrentProcess
GetVersionExW
GlobalFree
GlobalAlloc
OutputDebugStringW
MultiByteToWideChar
GetSystemDirectoryW
LockResource
SizeofResource
FindResourceW
LoadLibraryW
GetModuleFileNameW
GetLastError
GetProcAddress
FindResourceExW
LoadResource
FreeLibrary
HeapFree
GetDiskFreeSpaceExW
CompareStringW
SetEnvironmentVariableA
LCMapStringA
WriteConsoleW
GetDriveTypeA
CompareStringA
CreateFileA
SetEndOfFile
SetWindowsHookExW
SetDlgItemTextW
SendMessageTimeoutW
FindWindowExW
RegisterWindowMessageW
UnhookWindowsHookEx
RegisterClassExW
TranslateMessage
DispatchMessageW
UnregisterClassA
LoadIconW
DestroyIcon
GetClassInfoExW
PostMessageW
ShowScrollBar
GetMessageW
GetDesktopWindow
PostThreadMessageW
SetParent
EnableMenuItem
GetSystemMenu
EnableWindow
SetWindowPos
GetClientRect
SetWindowLongW
GetWindowLongW
CreateWindowExW
DrawTextW
ReleaseDC
CreateDialogParamW
LoadCursorW
GetDC
SetCursor
PtInRect
GetCursorPos
SetWindowTextW
LoadImageW
GetDlgItem
OffsetRect
KillTimer
GetParent
IsWindowVisible
DestroyWindow
CallWindowProcW
ScreenToClient
GetWindowRect
SendMessageW
IsWindow
DialogBoxParamW
ActivateKeyboardLayout
DefWindowProcW
MessageBoxW
EndDialog
SetTimer
ShowWindow
MoveWindow
SystemParametersInfoW
LoadKeyboardLayoutW
UnloadKeyboardLayout
GetKeyboardLayoutList
ClientToScreen
AddFontResourceW
SetTextColor
SetBkMode
CreateSolidBrush
SetBkColor
SelectObject
CreateFontIndirectW
GetDeviceCaps
GetObjectW
DeleteObject
GetStockObject
LookupAccountNameW
RegOpenKeyW
AdjustTokenPrivileges
RegQueryValueExW
RegLoadKeyW
RegCloseKey
RegSaveKeyW
EqualSid
IsTextUnicode
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
BuildExplicitAccessWithNameW
GetSecurityInfo
RegDeleteValueW
ConvertSidToStringSidW
GetTokenInformation
LookupPrivilegeValueW
RegOpenKeyExA
RegQueryValueExA
FreeSid
SetNamedSecurityInfoW
SetEntriesInAclW
AllocateAndInitializeSid
GetNamedSecurityInfoW
RegCreateKeyExW
OpenProcessToken
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyW
RegDeleteKeyW
RegUnLoadKeyW
ShellExecuteExW
ExtractIconExW
ShellExecuteW
SHGetSpecialFolderPathW
SHFileOperationW
SHCreateDirectoryExW
CoInitializeEx
CoCreateInstance
CoUninitialize
CoCreateGuid
CoInitialize
SysStringLen
SysAllocString
SysFreeString
PathFileExistsW
SHDeleteKeyW
PathIsDirectoryW
ImageList_Remove
ImageList_SetBkColor
ImageList_Create
ImageList_ReplaceIcon
htonl
inet_addr
htons
WSAAsyncSelect
bind
WSAGetLastError
socket
sendto
recvfrom
closesocket
WSACancelAsyncRequest
WSACleanup
WSAAsyncGetHostByName
WSAStartup
ntohl
Netbios
NetApiBufferFree
NetWkstaTransportEnum
EnumProcesses
GetModuleFileNameExW
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
API_ClearAllOldVersionOnInstall
API_ClearDiretoryDeleteFlag
API_MoveVersionFileFromBackup
AddCheckBoxCtrl
AddWarningCtrl
BackupSetupPack
CheckHKCUForceReboot
CheckQQPinyinDelete
ClearAllOldVersionOnInstall
ConvertSkinGUID2CurrentFile
CopyFileRightNow
CopyHistroyVersionSkinFileToCurUse
CoverOldSkinFileToSkinGUID
CreateBitmapCtrl
CreateUniqueDiretory
DelImeReg
DelImeReg2
DelQQPinyinAppdata
DelQQPinyinHKCU
DelRegHotKey
DeleteHKCUKey
DeleteHKCUValue
DeleteOldUnintallKey
DeleteSystem32FileTSETKP
ForceFirstInstallRecommendSkin
ForceRecommendSkin
FreeTxSSO
FreeTxSSO2
GetAppDataOwnDir
GetBindQQ
GetCmdParam
GetCurrentQQPinyinApp
GetEnumQQ
GetInstallPackInfo
GetLastVersion
GetLenovoLog
GetParaNeed
GetRawSupplyID
GetSupplyID
GetUniqueImeName
GetUniqueUninstallerName
HideStatusBar
InitSetupLog
InstallEUDC
InstallFor64
IsAdmin
IsExistOccupyExe
IsLenovoReqInstall
IsNeedRunQQPYWizard
IsQQPYLaunchWizard
IsQQPinyinDefaultIme
IsQQWubiRecommendEnable
IsVideoHelpEnable
IsWow64System
MergeUserDefinedFile
ModifyOccupyingProcessForm
MoveFileAfterReboot
MoveVersionFileFromBackup
NotifyHostSetupStatus
NotifyHostTerminateError
PackMoveWindow
PostInstall
PostUninstall
PreInstall
PreUninstall
QPCreateReboot
QPFindReboot
QQPinyinImeInstall
QQpinyinAddToAllUser
QQpinyinRape
QQpinyinRapeInit
ReadHKCUString
RecordOldDirFor64
RefreshImeList
RegQQPYProtocol
RegQQPinyinImeChecker
RegQQWbProtocol
RegQQWubiImeChecker
ReginsterHotKey
RemoveOldDatFileAfterReboot
RemoveOldFile
RenameAndDeleteFile
RollBackMingLiuTTX
SaveCmdLineSupplyId
SaveForceRawSupplyId
SaveInstallPackInfo
SaveWelcomeForm
SendInstallStat
SendMessageToLiveUp
SendUninstallReason
SendUnistallStat
SetAutoCheck
SetOnIonAutoCheck
SetPathEveryoneAccess
SetWindowText2
StatInit
TuningWindowPosition
TuningWindowPosition2
UnInstallQQPinyin
UnRegQQPYProtocol
UnRegQQPinyinImeChecker
UnRegQQWbProtocol
UnRegQQWubiImeChecker
UninstallEUDC
UninstallFor64
UpdateHandInputLibLastUpdateTime
WriteHKCUDWORD
WriteHKCUString
WriteSetupLog
add_recommend_wubi_ctrl
free_instfilespage_bitmap
kill_instfilespage_timer
load_instfilespage_bitmap
load_instfilespage_url
modify_reg_for_yulinmufeng
start_instfilespage_timer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GlobalFree
GlobalSize
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
GetLastError
VirtualAlloc
VirtualProtect
lstrlenW
FreeLibrary
wsprintfW
CLSIDFromString
StringFromGUID2
Alloc
Call
Copy
Free
Get
Int64Op
Store
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ