Ox77F052CC
_DllMain@12
Static task
static1
Behavioral task
behavioral1
Sample
2ba4a6aa791fe305af1c86247308f372_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2ba4a6aa791fe305af1c86247308f372_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ba4a6aa791fe305af1c86247308f372_JaffaCakes118
Size
152KB
MD5
2ba4a6aa791fe305af1c86247308f372
SHA1
1ce966da078da3df50433ed4722afbbb9c6a05b1
SHA256
a8708e49e1079d13f895422af55aebde6d07297f93d1b5e1634ffeedcb941438
SHA512
d3e60afc640b6c1ac452d9e73218c4f0532e40c0c4b029beb936e242c4c2b38bd0798be6423dddf93ac837d7d1179151931e8427405d139fd668c5e3caec68dd
SSDEEP
3072:Uh6fCczbI367AEowF6kKnuHc5HFYd2y8YaJV/yhLHg:86fNbIUAKlKuHelq25
Checks for missing Authenticode signature.
resource |
---|
2ba4a6aa791fe305af1c86247308f372_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
GetProcAddress
GetModuleHandleA
EnterCriticalSection
DeleteCriticalSection
ReadFile
SetFilePointer
WriteFile
GetLastError
LoadLibraryA
GetModuleFileNameA
LoadLibraryExA
GetVersionExA
CloseHandle
CreateFileA
DeviceIoControl
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCommandLineA
GetVersion
InterlockedDecrement
InterlockedIncrement
RtlUnwind
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
GetCurrentProcess
HeapReAlloc
LeaveCriticalSection
VirtualAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoW
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
GetKeyboardType
wsprintfA
Ox77F052CC
_DllMain@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ