DllInit
rsSubH
rsSuba
rsSubb
rsSubc
rsSubd
rsSube
rsSubf
rsSubg
Static task
static1
Behavioral task
behavioral1
Sample
080cc4df2b322fe7fcb491b31cd4dfdc_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
080cc4df2b322fe7fcb491b31cd4dfdc_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
080cc4df2b322fe7fcb491b31cd4dfdc_JaffaCakes118
Size
48KB
MD5
080cc4df2b322fe7fcb491b31cd4dfdc
SHA1
bc9ced4af558e2725279fb05fe62af5664162198
SHA256
3d9554624187990e8f97a22e6169de00f55e90369153e2e520b57201824f54a3
SHA512
da2da5d42e39c624a2d195c67c83d6b6cf2ab870e6f1288f0180e15a8d8522b126e85385302a3734d1bae5d9e1ac8d678fab3992d77e3ea94ff1e45d9a738084
SSDEEP
768:QFo6jfHhiitC8JgceqhcrNZPujT7k/zM9RGStZyPXRXo9r:R6jhthJgceqhcrf2no/zMuf1oJ
Checks for missing Authenticode signature.
resource |
---|
080cc4df2b322fe7fcb491b31cd4dfdc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualFree
VirtualAlloc
lstrcmpiA
GetProcAddress
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CloseHandle
GetCommandLineA
GetStringTypeW
GetStringTypeA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
RtlUnwind
GetForegroundWindow
DllInit
rsSubH
rsSuba
rsSubb
rsSubc
rsSubd
rsSube
rsSubf
rsSubg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ