DllMain
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
47ae30fae080b54ca4ed358c68dbfc37_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47ae30fae080b54ca4ed358c68dbfc37_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
47ae30fae080b54ca4ed358c68dbfc37_JaffaCakes118
Size
387KB
MD5
47ae30fae080b54ca4ed358c68dbfc37
SHA1
1d12f4dbd28d02b1f1ffda8b2cc01311e6428d7c
SHA256
a39a530c1c7def883f0babb109267b445e662482887ae360e87a5841b33d1f02
SHA512
b2558bfba641cbd9c658b5d0ac68e59eaaea7096753541dd82b6b56a04861d51965707840f8f3eba759569ff44af4fe55bce0cdeaa6be52055aeef1062b88bea
SSDEEP
12288:qvap6EX0DAL4esyCMe/CvrdE2l+fMEpLi6J:qvap6U0DALWKe/COMEA
Checks for missing Authenticode signature.
resource |
---|
47ae30fae080b54ca4ed358c68dbfc37_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
lstrcpyA
lstrcatA
LoadLibraryA
GetProcAddress
FreeLibrary
SetFilePointer
SetStdHandle
CloseHandle
GetLocaleInfoW
FlushFileBuffers
GetLocaleInfoA
GetCommandLineA
GetVersion
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
DPtoLP
SetTextAlign
SetBkMode
CreatePen
MoveToEx
LineTo
SetTextCharacterExtra
GetDeviceCaps
DeleteObject
SelectObject
RestoreDC
GetTextMetricsA
CreateFontIndirectA
SaveDC
ExtTextOutA
GetObjectA
SetTextJustification
GetTextExtentPoint32A
SetTextColor
ord100
ord129
ord141
ord151
ord241
ord123
ord189
ord188
ord116
ord117
ord125
ord120
ord282
ord283
ord190
ord191
DllMain
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ