DllMain
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
22d1579cf96aa6a889eec9b82156fb61_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
22d1579cf96aa6a889eec9b82156fb61_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
22d1579cf96aa6a889eec9b82156fb61_JaffaCakes118
Size
179KB
MD5
22d1579cf96aa6a889eec9b82156fb61
SHA1
75bc7d43d5452a72542caee26738ba27daaa9d4c
SHA256
d4d04ce8250ebecad6f64f457113dd11df933ae8e304a07f771b4bbca0ac90d2
SHA512
706af124a890a2b0772a9ad6e1cabc31018fdaa24ddb6c8705579edf35289b09c817a3c2bb79e8eb108b1021266668bc97922ddf5f9ae739a6907067403689ff
SSDEEP
3072:2PsScYL5a7PBXxbefgL7gUDPzGcg6Lc5fKaxmtXcd+UWNQ1cn75hMe21+zv4m+s6:d0aFXxyfpcgHfKYHIRGK75hAav3p
Checks for missing Authenticode signature.
resource |
---|
22d1579cf96aa6a889eec9b82156fb61_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
SetHandleCount
ExitProcess
TerminateProcess
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapFree
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
WriteFile
VirtualFree
HeapCreate
SetFilePointer
SetStdHandle
CloseHandle
GetLocaleInfoW
FlushFileBuffers
GetLocaleInfoA
RaiseException
LoadLibraryA
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
HeapDestroy
GetFileType
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
lstrcpyA
VirtualAlloc
GetStdHandle
GetOEMCP
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
SetRect
ord100
ord129
ord141
ord189
ord196
ord188
ord134
ord101
ord117
ord125
ord123
ord120
ord192
ord190
ord191
ord283
ord282
ord400
ord1100
ord1110
ord101
ord107
ord2300
ord100
ord302
ord206
ord1228
ord122
ord1209
ord1205
ord1200
ord1229
ord1215
ord303
ord1201
DllMain
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ