AddHandler
GetModuleId
GetModuleVersion
ModuleStartup
OnKernelEventReceived
RemoveHandler
Static task
static1
Behavioral task
behavioral1
Sample
491506b2643d235aa37da8cb64a36753_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
491506b2643d235aa37da8cb64a36753_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
491506b2643d235aa37da8cb64a36753_JaffaCakes118
Size
28KB
MD5
491506b2643d235aa37da8cb64a36753
SHA1
cdfd2bb4a41ee7f464f2a15063406b688effc86f
SHA256
c8a1a5fe60449bdd4bb965db6936d0f2360458f8c2c7094c0e05cd935cb55d5d
SHA512
fb035ea2dead1f14ced7fa73a3f75507c3ef7e7eb601d54c2bc9ffdc6ff4dd32c73a1452a5ab8f3e0e88729cb05210f602573be506e2ff0ac16ef6faf428854d
SSDEEP
192:Uc5VxVGpqgtYqMCWqcvu6zdlcjZgck99vmgRM4:Uc5VxVGpqg0Cn6uur1v99vTR
Checks for missing Authenticode signature.
resource |
---|
491506b2643d235aa37da8cb64a36753_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord1089
ord825
ord815
ord3663
ord3584
ord543
ord803
ord1247
ord6467
ord800
ord538
ord5440
ord6383
ord823
ord5450
ord6394
ord1105
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord561
ord4274
ord600
ord826
ord269
ord1116
__CxxFrameHandler
memmove
free
malloc
_EH_prolog
__dllonexit
_onexit
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
LocalFree
GetVersionExA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
LocalAlloc
htons
WSAStartup
closesocket
socket
gethostname
ioctlsocket
bind
inet_ntoa
gethostbyname
inet_addr
recv
AddHandler
GetModuleId
GetModuleVersion
ModuleStartup
OnKernelEventReceived
RemoveHandler
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ