NP_GetEntryPoints
NP_Initialize
NP_Shutdown
Static task
static1
Behavioral task
behavioral1
Sample
fdaa8a1db9e5da61db319678e567e625_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fdaa8a1db9e5da61db319678e567e625_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fdaa8a1db9e5da61db319678e567e625_JaffaCakes118
Size
11KB
MD5
fdaa8a1db9e5da61db319678e567e625
SHA1
b7aaacdc8afada1a33f4a673b7c129642476ce44
SHA256
bb2dc01a2ffd1a09b9968aa6508fe38ac5afb3435dac6537e67f40f23a2a19ac
SHA512
1c4690aee032cbb20504a03fe2b6e0cf86162906c7bdf70363ff3830338c721909240171153011bf4029d20a75acb995b9582c254cb6aeac9c40687a3cacf817
SSDEEP
192:/57iEwMZiChSRZkY5N0oMMFbLoh7oJs8Mp2rRTQLswMn:/5eiERHN0o3bgYbMp2rlQLQ
Checks for missing Authenticode signature.
resource |
---|
fdaa8a1db9e5da61db319678e567e625_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strcpy
??2@YAPAXI@Z
??3@YAXPAX@Z
memcmp
memset
_EH_prolog
__CxxFrameHandler
_onexit
__dllonexit
??1type_info@@UAE@XZ
ord539
ord800
ord6467
ord1578
ord600
ord826
ord1176
ord1243
ord269
LocalAlloc
LocalFree
MultiByteToWideChar
GetProcessHeap
HeapAlloc
CreateThread
GetModuleHandleA
GetLastError
DispatchMessageA
TranslateMessage
GetMessageA
MessageBoxA
SetWindowLongA
ShowWindow
GetWindowLongA
GetClientRect
GetClassInfoExA
LoadCursorA
RegisterClassExA
DestroyWindow
DefWindowProcA
CoCreateInstance
OleInitialize
CoInitializeEx
OleSetContainedObject
OleRun
SysAllocStringLen
SysFreeString
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ