DllMain
fltComment
fltDeletePage
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
1b2302ada9a029f2a422c3ea3979000e_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b2302ada9a029f2a422c3ea3979000e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1b2302ada9a029f2a422c3ea3979000e_JaffaCakes118
Size
106KB
MD5
1b2302ada9a029f2a422c3ea3979000e
SHA1
083e0dcfa60da6a1768096b38b1c10c66b830839
SHA256
2806ef6d91b441474e3d9c63c41f80ad4a23e2b77347b14cfbfd97c662b0826f
SHA512
90fe0282ed53ce536bba2a7f72cb805c22e688392fd57a962d1b652638b0aeece2e3ff1bb9e458b3e20d386116c7ba3b4e3f67f33d571feebc488b28ea0e341e
SSDEEP
3072:ZNbZozK0agTUzgf+XQ7YGokr+b/T5zEZSA:bQYO+AsUr+b/T5zEZf
Checks for missing Authenticode signature.
resource |
---|
1b2302ada9a029f2a422c3ea3979000e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyA
TerminateProcess
ExitProcess
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
VirtualAlloc
HeapAlloc
HeapFree
WriteFile
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
GetModuleFileNameA
GetCurrentProcess
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
GetStartupInfoA
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
PatBlt
SetTextAlign
GetBitmapBits
DeleteObject
DeleteDC
SelectObject
TextOutA
SetBkMode
SetTextColor
CreateCompatibleDC
CreateDCA
CreateFontA
CreateBitmap
ord109
ord192
ord196
ord189
ord101
ord312
ord158
ord285
ord137
ord188
ord100
ord129
ord141
ord125
ord282
ord284
ord283
ord175
ord190
ord191
ord179
ord212
DllMain
fltComment
fltDeletePage
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ