init_load_init
init_unload_init
Static task
static1
Behavioral task
behavioral1
Sample
3d2d981a95262c39a60a49e6252290bc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d2d981a95262c39a60a49e6252290bc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3d2d981a95262c39a60a49e6252290bc_JaffaCakes118
Size
36KB
MD5
3d2d981a95262c39a60a49e6252290bc
SHA1
579d36883099778a74011720ae6c14743f97da7c
SHA256
9415a8bc2be280a21c1ed5c11db4b3b69f47fb4246cefb13eaf983a4434c6416
SHA512
7adc2209ad76ec2ce0c61166b9adb4158823576118ae624964c236f482f11298853b51a2c9eb0654d417b255f8a0a0c4ec91d72a674f4bdb26eabbb522618377
SSDEEP
384:FjvD1/T0MCSRpc578geomml02stVAKK7rnJSFErywcBuIqsg3oZOmsZ:xB0MCj7892IVrKZwSJiqsmoZ
Checks for missing Authenticode signature.
resource |
---|
3d2d981a95262c39a60a49e6252290bc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
nt_calloc
me_new_command
me_token_unget
me_env_ptr
me_token_get
me_errno
me_token_string
me_token_error
me_wait_for_ack
me_escape
me_display_prompt
me_curr_part
nt_malloc
me_select2d_initialize
nt_free
me_get_part_elem
me_get_part_name
GetStdHandle
GetFileType
GetStringTypeW
GetStringTypeA
LCMapStringA
MultiByteToWideChar
LCMapStringW
SetEndOfFile
SetFilePointer
ReadFile
GetProcAddress
GetOEMCP
LoadLibraryA
GetCPInfo
CreateFileA
GetACP
SetStdHandle
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
HeapFree
GetLastError
CloseHandle
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
FlushFileBuffers
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
init_load_init
init_unload_init
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ