Create
Destroy
Version
Static task
static1
Behavioral task
behavioral1
Sample
49003a1d13b29574fa21190d1d8c2d44_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49003a1d13b29574fa21190d1d8c2d44_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
49003a1d13b29574fa21190d1d8c2d44_JaffaCakes118
Size
42KB
MD5
49003a1d13b29574fa21190d1d8c2d44
SHA1
bd6dc3f726b0ca825e8a575cbb1032222f76528e
SHA256
3a81acd86671778c0227308424513a3ab9f59c50ae7ca5d8d9add486e8152491
SHA512
6741438d3faec27d94985323bf7a33f59742a6934028a147b24f278b83e4a69615157e12ff2e2261d9e1e425f03eb5c690b90c7e7678107a2d899864942ebef0
SSDEEP
768:Gc9Uf/7O2/jXxShbanF0o6S1CWpFKHqPCsC8C57ZjKGcSNAEPHMJApha:/9UfP/jBdnl6SwWmHqPCsC8C5djKGzqj
Checks for missing Authenticode signature.
resource |
---|
49003a1d13b29574fa21190d1d8c2d44_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AddAtomA
CreateSemaphoreA
FindAtomA
GetAtomNameA
GetLastError
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
_write
__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memset
strcmp
_EL_Xlen
_EL_Xran
_EL_free
_EL_malloc
Create
Destroy
Version
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ