FMain
wdCommandDispatch
wdGetApplicationObject
Static task
static1
Behavioral task
behavioral1
Sample
38f9655c72474b6c97dc9db9b3609677_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
38f9655c72474b6c97dc9db9b3609677_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
38f9655c72474b6c97dc9db9b3609677_JaffaCakes118
Size
91KB
MD5
38f9655c72474b6c97dc9db9b3609677
SHA1
220ea47d692afc196b5b913a9693323fd51f00f5
SHA256
b4966f8febdba6b2d674afffc65b1df11e7565acbd4517f1e5b9b36a8c6a16ed
SHA512
13b0960780e142df5db04ec39e3fffbfb79cf1945d794a0c557daee4c9eedb066e87eb48f93d19ca4509d7b7fadf02e2276043fcdd38ca518758ed79d7999a1e
SSDEEP
1536:HuNok1cBtnVAFrjyWLEXPG+17QOsWxcdQmYH4kdG5aI6zFAjg+mj:HkcbVApjzYF74QmYH4ONzWjDmj
Checks for missing Authenticode signature.
resource |
---|
38f9655c72474b6c97dc9db9b3609677_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
SetErrorMode
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetACP
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
FMain
wdCommandDispatch
wdGetApplicationObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ