AtlAdvise
AtlFreeMarshalStream
AtlMarshalPtrInProc
AtlModuleGetClassObject
AtlModuleInit
AtlModuleRegisterClassObjects
AtlUnadvise
AtlUnmarshalPtr
chk
Static task
static1
Behavioral task
behavioral1
Sample
0be8be12d09af8c8aeb73526b3ef1efc_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0be8be12d09af8c8aeb73526b3ef1efc_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0be8be12d09af8c8aeb73526b3ef1efc_JaffaCakes118
Size
48KB
MD5
0be8be12d09af8c8aeb73526b3ef1efc
SHA1
6fbea4512d17deeb8e27016954bcac69cbed90c5
SHA256
2f5259cd4d5bbc8a9cc28c1ed637eca9cc3e052554cb0966e4dd149aceba1469
SHA512
577e995292f9d465e41320680e55fa22b868428b96e81fc5985988c8658264c6356fd0ec87659ef3543476780b1c547f8a5aaea18f5e3517e7dff887b534a461
SSDEEP
768:P0ysUBLF20YBT6xZm9it9RCzRgmvmy2yIszXo9hdO6/AQuo:sysUBh20YB2ZmoRCzRgImypXboS
Checks for missing Authenticode signature.
resource |
---|
0be8be12d09af8c8aeb73526b3ef1efc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
lstrcmpiA
GetProcAddress
VirtualFree
VirtualAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateEventA
SetErrorMode
GetCommandLineA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
RtlUnwind
GetForegroundWindow
GetSystemMetrics
wsprintfA
AtlAdvise
AtlFreeMarshalStream
AtlMarshalPtrInProc
AtlModuleGetClassObject
AtlModuleInit
AtlModuleRegisterClassObjects
AtlUnadvise
AtlUnmarshalPtr
chk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ