DllMain
beforegllav
gllav
ppusk
preppusk
Static task
static1
Behavioral task
behavioral1
Sample
3d8f68541150f430b1307648433685fc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d8f68541150f430b1307648433685fc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3d8f68541150f430b1307648433685fc_JaffaCakes118
Size
25KB
MD5
3d8f68541150f430b1307648433685fc
SHA1
ed43ca14db19aa373dc096f6a7f85e417663689c
SHA256
a6d8f1a5b1faadfa1de6d9971165aa0339a0618b58a9625d3b427289303a199a
SHA512
6eb88b33b18c171ef593263dd9c470d65d094ae63180634b4e2a98f2f3668055412826358849ee58c08c3766975052f8759ef512f86724f972fe2fe1acc32028
SSDEEP
384:X3VwrHGOun7X5g1f581pEm52VUQ6ASI8dLfSfrkGAW11W1:XlMZKTWcb/45pSldL6frpAW11W1
Checks for missing Authenticode signature.
resource |
---|
3d8f68541150f430b1307648433685fc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
MultiByteToWideChar
Sleep
WideCharToMultiByte
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
_strnicmp
__dllonexit
_errno
_itoa
atoi
fflush
free
malloc
memcpy
memset
strchr
strlen
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
SysAllocStringByteLen
VariantInit
wsprintfA
DllMain
beforegllav
gllav
ppusk
preppusk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ