DllMain
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
3eae38de1dc29a778e24b87c391d4da2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3eae38de1dc29a778e24b87c391d4da2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3eae38de1dc29a778e24b87c391d4da2_JaffaCakes118
Size
194KB
MD5
3eae38de1dc29a778e24b87c391d4da2
SHA1
37433c88d10a1fef3a96859230bff1dbd41c1e49
SHA256
dbe866cc61e286c4913ef8c7a3b261752e3b6e8bf007f1e0faefd244275bc1ec
SHA512
442b29bb26205672564beed663944942488a7014ba406571a7d552abcb4f70d0876538b78a8f3175d9eb92dc9a19f4709ead02179b7f1acefa33d4a2137d95cf
SSDEEP
3072:4pSovBFWRu7wTQ3UCiIGIYJj9F44GgGvyKF8jQblxda6m41vUsCmsvxbK3x:5o3zcTQRiIGIA44dky0lva6m41MsCFxe
Checks for missing Authenticode signature.
resource |
---|
3eae38de1dc29a778e24b87c391d4da2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalAlloc
LocalFree
SetLastError
HeapDestroy
SetFilePointer
SetStdHandle
CloseHandle
FlushFileBuffers
LoadLibraryA
VirtualAlloc
HeapFree
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WriteFile
WideCharToMultiByte
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
lstrcpyA
TlsGetValue
GetLastError
GetEnvironmentStringsW
GetModuleFileNameA
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetDC
GetTextMetricsA
TextOutA
CreatePalette
ord163
ord116
ord123
ord117
ord129
ord125
ord120
ord192
ord189
ord280
ord188
ord281
ord191
ord190
DllMain
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE