CPlApplet
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
178c45dc091282bc037c05e2102017ba_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
178c45dc091282bc037c05e2102017ba_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
178c45dc091282bc037c05e2102017ba_JaffaCakes118
Size
39KB
MD5
178c45dc091282bc037c05e2102017ba
SHA1
3bb7b43c1881f40b5c006a10b2b89874e93e78e4
SHA256
c81416723ba2dba86b57a9f018c46b0c0564a4d04f63c397065eb9e35c822e36
SHA512
6f97d429df5a359c49c0a83ca61bae3c998afde380d666469f54f496a88a5f746cb0529eb2228ec70a068bfb93b68ebd213bc097d96938fb5be9dc87f8f3f6d6
SSDEEP
768:T+lzeOVH9RyRMHFksPHrPS958GrF/hkanU0aQ/974q+D9P2unD6mHDxREzHu8nZf:T+de8dR9Pm8GrF/rFaQu5RDLeHTka
Checks for missing Authenticode signature.
resource |
---|
178c45dc091282bc037c05e2102017ba_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
_initterm
_snprintf
sprintf
strrchr
malloc
free
memcmp
memcpy
memset
_except_handler3
_strupr
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
KillTimer
DefWindowProcA
wsprintfA
IsWindowVisible
GetWindowThreadProcessId
PostMessageA
SetTimer
SendMessageA
UnhookWinEvent
SetWinEventHook
GetClassNameA
CallWindowProcA
SetSecurityDescriptorDacl
RegSetValueA
RegDeleteValueA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
Sleep
GetTempPathA
GetTempFileNameA
CreateMutexA
GetLastError
GetCurrentProcessId
OpenMutexA
GetStartupInfoA
CreateProcessA
DisableThreadLibraryCalls
ExpandEnvironmentStringsA
WaitForSingleObject
SetErrorMode
GetFileAttributesExA
CopyFileA
CreateDirectoryA
lstrcatA
GetFileAttributesA
MultiByteToWideChar
GetModuleFileNameA
DeleteFileA
TerminateProcess
FreeResource
LoadResource
SizeofResource
FindResourceA
GetProcessHeap
CompareStringA
GetThreadLocale
lstrcpynA
FreeLibrary
ExitThread
HeapAlloc
lstrcmpA
lstrcmpiA
IsBadReadPtr
lstrcatW
QueryDosDeviceW
GetModuleFileNameW
lstrlenA
lstrcpyA
GetProcAddress
HeapFree
CreateThread
IsBadWritePtr
GetModuleHandleA
LoadLibraryA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
IsBadStringPtrA
VirtualFree
VirtualAlloc
WriteFile
CreateFileA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetTickCount
GetVolumeInformationA
GetSystemDirectoryA
OpenProcess
CPlApplet
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ