CanUnload
CanUnload2
RMACreateInstance
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
187ed877f1c88762848ac00d6b65e7e0_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
187ed877f1c88762848ac00d6b65e7e0_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
187ed877f1c88762848ac00d6b65e7e0_JaffaCakes118
Size
280KB
MD5
187ed877f1c88762848ac00d6b65e7e0
SHA1
cfa6923d4ea0a8dad792cc57da66ea480840a921
SHA256
9a9c80eed4154a7a290a9882524f7b92dbb12ca2bee42be81626021c5046eddb
SHA512
b39445a0db75a87d646a4f2c477598bea6bd34c72a0894f538083d625e7dd89717a2ba54dca06ab81e21f38564a377037fc55fac328ea9c6ea8975d2b67d308f
SSDEEP
3072:GowiTBW3Si3EwjdY3LE6vDrDwK9p5vDlk1eDUKS/4OQfWs6f0DybpDamMdQFShkw:ljW3S+dkDrDeg7XOZ0WtumM6kT
Checks for missing Authenticode signature.
resource |
---|
187ed877f1c88762848ac00d6b65e7e0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DispatchMessageA
GetMessageA
PostMessageA
PostThreadMessageA
PeekMessageA
_stricmp
strncpy
isupper
tolower
__dllonexit
realloc
_adjust_fdiv
strrchr
??3@YAXPAX@Z
_purecall
calloc
strchr
_ftol
toupper
_putenv
_vsnprintf
atol
_endthreadex
_beginthreadex
memchr
malloc
memmove
free
_onexit
_initterm
??2@YAPAXI@Z
DisableThreadLibraryCalls
ResetEvent
SetThreadPriority
ResumeThread
GetThreadPriority
QueryPerformanceFrequency
QueryPerformanceCounter
SuspendThread
CloseHandle
WaitForSingleObject
Sleep
GetLastError
InitializeCriticalSection
GetCurrentThreadId
CreateEventA
SetEvent
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTickCount
CoInitializeEx
CoUninitialize
CanUnload
CanUnload2
RMACreateInstance
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ