DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Uninstall
Static task
static1
Behavioral task
behavioral1
Sample
105e36a3d85631fe75decd156eb71595_JaffaCakes118.dll
Resource
win7-20240903-en
Target
105e36a3d85631fe75decd156eb71595_JaffaCakes118
Size
208KB
MD5
105e36a3d85631fe75decd156eb71595
SHA1
bb9cb165edd1b4a92a7ad7b9de302c0a350b53f7
SHA256
e5c92f8b6521c4c37d6c110005bc1cd1144375d6659ddcb2d0690a5053a629cd
SHA512
56c39c8d19e932179f6ed180750d0f48c5d5fc88a01c9b6083428f23163677bf7cbf49bb8bdb859bd9e23ccc9006e52a45d978d1044e7b6087f6625bf48cd70c
SSDEEP
3072:Wmb5CVdMeyd2v1zf/1OxiudAdM05C65OdEphccueDgx2Wr/wwiGx1n:n5CVdMea2vp/1OxilT5Cnd8hdDgxOK
Checks for missing Authenticode signature.
resource |
---|
105e36a3d85631fe75decd156eb71595_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpynA
LocalFree
FreeResource
lstrlenW
InitializeCriticalSection
DeleteCriticalSection
lstrcpyA
lstrcatA
GetModuleFileNameA
MulDiv
DisableThreadLibraryCalls
LoadLibraryExA
lstrcmpiA
IsDBCSLeadByte
VirtualQuery
GetSystemInfo
VirtualProtect
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
FindResourceA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
TerminateProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsFree
GetCPInfo
GetOEMCP
ExitProcess
GetCommandLineA
TlsSetValue
GetSystemTimeAsFileTime
CreateDirectoryA
GetFileAttributesA
LoadResource
LockResource
SizeofResource
ReadFile
SetFilePointer
CreateFileA
WriteFile
CloseHandle
GetCurrentThreadId
FreeLibrary
LoadLibraryA
MultiByteToWideChar
OutputDebugStringA
GetModuleFileNameW
SetLastError
LoadLibraryW
GetPrivateProfileStringA
HeapAlloc
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
GetModuleHandleW
GetLastError
GetModuleHandleA
InterlockedIncrement
GlobalLock
GlobalUnlock
GetProcessHeap
HeapFree
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
InterlockedDecrement
lstrlenA
WideCharToMultiByte
SetEndOfFile
HeapReAlloc
RaiseException
LCMapStringA
RtlUnwind
GetClientRect
GetWindowTextA
DefWindowProcA
SetWindowLongA
UnregisterClassA
GetWindowTextLengthA
SetWindowTextA
GetSystemMetrics
GetDC
GetDlgItem
ShowWindow
CharNextA
IsChild
BeginPaint
EndPaint
OffsetRect
DrawIconEx
GetSysColor
DrawEdge
DrawTextA
FillRect
ModifyMenuA
AppendMenuA
DestroyMenu
CreatePopupMenu
CreateMenu
wsprintfW
CreateIconFromResourceEx
CreateIconFromResource
MessageBoxA
LoadIconA
ReleaseDC
GetWindowLongA
IsWindow
CreateWindowExA
GetClassInfoExA
RegisterClassExA
LoadCursorA
wsprintfA
SetFocus
MapWindowPoints
MoveWindow
GetMenuItemInfoA
TrackPopupMenu
DestroyWindow
FindWindowExA
GetWindow
GetFocus
GetKeyState
TranslateMessage
DispatchMessageA
CallWindowProcA
SendMessageA
CreateDCA
GetDeviceCaps
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
SetTextAlign
TextOutA
GetTextExtentPoint32A
CreateBitmap
CreatePatternBrush
ExtTextOutA
CreatePen
CreateSolidBrush
CreateFontIndirectA
SetTextColor
SetBkMode
SetBkColor
SetBrushOrgEx
RestoreDC
DeleteObject
GetStockObject
DeleteDC
GetTextMetricsA
SelectObject
RegDeleteValueA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryInfoKeyA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ReleaseStgMedium
RegisterDragDrop
CoTaskMemFree
StringFromCLSID
CoCreateGuid
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
VarUI4FromStr
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysAllocStringLen
VariantClear
VariantInit
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysStringLen
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Uninstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ