DllEntryPoint
InitializeMonitorEx
PM_Init
Static task
static1
Behavioral task
behavioral1
Sample
27aed2e0d5df6ca24f71ae71ed2058dd_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
27aed2e0d5df6ca24f71ae71ed2058dd_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
27aed2e0d5df6ca24f71ae71ed2058dd_JaffaCakes118
Size
196KB
MD5
27aed2e0d5df6ca24f71ae71ed2058dd
SHA1
c4b8ce2248b6f724129a7e567d4d28dbad612517
SHA256
b1626b1d40ef1b891a8544f6d443a851922644af0f8a8d8fad6c1b56838df09d
SHA512
28e1dfad796f572fa073c94cedd464ffaaa94860340dd085a4f15eb28dd132b95829ea574328ea13f06135812d0e0b2d2d18cbff32be5755b26a57334c40607f
SSDEEP
3072:ZRojxTLE5nKImRPmnHXVe3jRNTqkCyshO5zpfi61wDEoyYvuh7CXI4X82XZVwviO:Z2+nVmRPmX6NmZeZpfr3oVvy/+Tw
Checks for missing Authenticode signature.
resource |
---|
27aed2e0d5df6ca24f71ae71ed2058dd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpiW
EnterCriticalSection
SetLastError
DeviceIoControl
ExitThread
CloseHandle
GetExitCodeThread
LeaveCriticalSection
GetLastError
CreateThread
DeleteCriticalSection
InitializeCriticalSection
GetStringTypeW
GetStringTypeA
lstrlenW
lstrcpyW
HeapFree
GetProcessHeap
WaitForSingleObject
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
RtlUnwind
CharNextW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegQueryInfoKeyW
DllEntryPoint
InitializeMonitorEx
PM_Init
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ