lineFreeCharCoord
lineFreeOutCharImage
lineSegmentation
Static task
static1
Behavioral task
behavioral1
Sample
396e8f707ac61febbcc5b37739573db1_JaffaCakes118.dll
Resource
win7-20240705-en
Target
396e8f707ac61febbcc5b37739573db1_JaffaCakes118
Size
369KB
MD5
396e8f707ac61febbcc5b37739573db1
SHA1
51346efbbf5fb6e934dfcd9c2ea2171b1fcb5b64
SHA256
931eaca7225d33c0ae10dc0de77e99961a6bc0f33b5e32c06bdf4da10fc67f7f
SHA512
d4365674e5ca51d62dd4e8f596a6a84a102ccb54b5903a749975c7ba87543b446b44d6f3e21a70e932e3d66c7b9b7b60e7431e87095f70fb1f1061a010af85cb
SSDEEP
6144:KO994Qvzi8pLc2WY2xTOLo6QYU3GIp4VIq8pnRglb7/UUiKYlwkZPOR1L5KA3+tk:t4Qvzi8pLc2WVxaLo6QYUhp4On+b7/5T
Checks for missing Authenticode signature.
resource |
---|
396e8f707ac61febbcc5b37739573db1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TlsFree
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
RaiseException
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
HeapAlloc
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
WriteFile
LoadLibraryA
InterlockedIncrement
HeapReAlloc
HeapFree
GetLastError
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
VirtualAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
GetModuleFileNameA
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
SetConsoleCtrlHandler
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
Sleep
LCMapStringA
LCMapStringW
SetFilePointer
IsValidLocale
IsValidCodePage
GetUserDefaultLCID
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
GetLocaleInfoW
CloseHandle
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
lineFreeCharCoord
lineFreeOutCharImage
lineSegmentation
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE