AtlAdvise
AtlFreeMarshalStream
AtlMarshalPtrInProc
AtlModuleGetClassObject
AtlModuleInit
AtlModuleRegisterClassObjects
AtlUnadvise
AtlUnmarshalPtr
chk
Static task
static1
Behavioral task
behavioral1
Sample
39c01e684607bda4b6a430c26aff726e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39c01e684607bda4b6a430c26aff726e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
39c01e684607bda4b6a430c26aff726e_JaffaCakes118
Size
52KB
MD5
39c01e684607bda4b6a430c26aff726e
SHA1
501be8ce3c327499a4937f76a4797f2e43bbaff4
SHA256
fb5ad2f8d83b769f5d083b6a85198660d378bb646f03d60e8bba89ff8210f873
SHA512
c64bdc5fdcf943546d892eb45a03a8b67334a5f90750a2e68551ff212c33ae7f8e7ad0881939b008d02e5ee69d6b7c04105dee6c58056cee216544f6e4ed04af
SSDEEP
768:hHtv+FbdZtm/kfNk8smxsyUgat5+P0vmy2yIszXo9qL4z9XLuo:hHtvaTtm/kfNNsT51mypXbom2XS
Checks for missing Authenticode signature.
resource |
---|
39c01e684607bda4b6a430c26aff726e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
lstrcmpiA
GetProcAddress
VirtualFree
VirtualAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateEventA
SetErrorMode
GetCommandLineA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
RtlUnwind
GetForegroundWindow
GetSystemMetrics
wsprintfA
AtlAdvise
AtlFreeMarshalStream
AtlMarshalPtrInProc
AtlModuleGetClassObject
AtlModuleInit
AtlModuleRegisterClassObjects
AtlUnadvise
AtlUnmarshalPtr
chk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ