Foo
GetNotesNumberField
GetNotesStringField
NotesCloseDB
NotesFriendlyInit
NotesFriendlyTerm
NotesGetDBHandle
NotesGetNoteHandles
NotesIntfcGetNoteshNote
NotesReopenDB
SetNotesNumberField
SetNotesStringField
Static task
static1
Behavioral task
behavioral1
Sample
2205f0b802204012711dca8c81077403_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2205f0b802204012711dca8c81077403_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2205f0b802204012711dca8c81077403_JaffaCakes118
Size
228KB
MD5
2205f0b802204012711dca8c81077403
SHA1
cc27ba6079bb6aceb40f020549d1372afe27fe0f
SHA256
e218d6af5733e8e443ffb8814ab2155783bc72db4dae300560649cec5d41265c
SHA512
baca0edee19dcbceebe883ab96f2c59c6b99af14a607a1f4f54638bad64c296c6b1caa87f9f62f8c443543681eebf743e553171d5310599302d06a0ef8d12877
SSDEEP
3072:KZ7pG1ZyrOOLcgd5E3fX1qoE3JhbMbAXAEo1WICjTk18aNJjkjV9nEBOyhd:KZA1ZUOmef2/JRVjA18QJjkjLEB5
Checks for missing Authenticode signature.
resource |
---|
2205f0b802204012711dca8c81077403_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord2001
ord2141
ord2050
ord2066
ord2051
ord2181
ord2177
ord391
ord2006
ord13
ord11
FreeEnvironmentStringsW
MultiByteToWideChar
SetFilePointer
SetStdHandle
CloseHandle
GetLocaleInfoW
lstrlenA
GlobalUnlock
GlobalLock
GlobalAlloc
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FlushFileBuffers
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
LoadLibraryA
GetLocaleInfoA
Foo
GetNotesNumberField
GetNotesStringField
NotesCloseDB
NotesFriendlyInit
NotesFriendlyTerm
NotesGetDBHandle
NotesGetNoteHandles
NotesIntfcGetNoteshNote
NotesReopenDB
SetNotesNumberField
SetNotesStringField
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ