?DockSetValue@@YAXMMMM@Z
?InitDock@@YAX_N@Z
?IsDockBandShow@@YA_NXZ
?ShowDockBand@@YA_N_N@Z
Static task
static1
Behavioral task
behavioral1
Sample
0b5ed90763b82e732557ffad89939cf4_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0b5ed90763b82e732557ffad89939cf4_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0b5ed90763b82e732557ffad89939cf4_JaffaCakes118
Size
40KB
MD5
0b5ed90763b82e732557ffad89939cf4
SHA1
1716d2a1ca988dabf60b4b0337edaee599a73892
SHA256
f67786318eb21259f358a568de2a67c645f6be5fcbacb5f4ba6e3ed52a8dbc05
SHA512
ecbc051a2b5874ec7431230c0cc2bf17063dddd1936220db69c1bfc72159accd486c1ed070ce4e48bac433e1c52ea569c74e1a8858183991e7a3fa207caa0836
SSDEEP
384:b+bzHxsRg//B40l49utd4Tg+Q+ntEbOknBcDMbr3m3PSMKx:yPORGJ40l498qTPxtMyAb7ISt
Checks for missing Authenticode signature.
resource |
---|
0b5ed90763b82e732557ffad89939cf4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
malloc
_initterm
free
??2@YAPAXI@Z
WaitForSingleObject
LoadLibraryA
GetProcAddress
lstrcpyA
DisableThreadLibraryCalls
?DockSetValue@@YAXMMMM@Z
?InitDock@@YAX_N@Z
?IsDockBandShow@@YA_NXZ
?ShowDockBand@@YA_N_N@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ