_LibMain@12
enter
Static task
static1
Behavioral task
behavioral1
Sample
150fae64d6275d38d9dd7a2927bb4adc_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
150fae64d6275d38d9dd7a2927bb4adc_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
150fae64d6275d38d9dd7a2927bb4adc_JaffaCakes118
Size
12KB
MD5
150fae64d6275d38d9dd7a2927bb4adc
SHA1
8959c79a27ce8e19fdb73546afa429d84e9dde0c
SHA256
1cc17b6ee077f22f75bc2dd1fbdf13b5d568ccf65328c105c6bf0f4a8591a2a5
SHA512
c2913d1c17ea982d9943087b611bb7cb7c88f9c391a67de8c5d0fded1d7734416ac5bf2276cf14ec955bc2f0ef7cbc122210462db7ddcc56e653e4d20c1611ff
SSDEEP
192:T0/IS5QdwaVGPCq1HTcpqKaKwkc9b29bM9BzLt8L7SWAtK:OIrtVCHTn3uM9Bz6L7SWAt
Checks for missing Authenticode signature.
resource |
---|
150fae64d6275d38d9dd7a2927bb4adc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
GetTcpTable
ExitProcess
ExpandEnvironmentStringsA
GetEnvironmentStringsA
GetLocalTime
CloseHandle
CopyFileA
LocalAlloc
LocalFree
OpenMutexA
OutputDebugStringA
CreateFileA
RtlUnwind
CreateMutexA
Sleep
WinExec
WriteFile
lstrcatA
lstrcpyA
DeleteFileA
SetTimer
KillTimer
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
PostQuitMessage
CreateWindowExA
DestroyWindow
SetWindowPos
DefWindowProcA
GetStockObject
RegCreateKeyExA
RegCloseKey
RegSetValueExA
_fdopen
_open_osfhandle
atoi
fclose
feof
fgets
fopen
fputs
free
fwrite
_cexit
malloc
memmove
printf
raise
setbuf
sprintf
strcmp
strcpy
strstr
vsprintf
_LibMain@12
enter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ