DllMain
Start
Static task
static1
Behavioral task
behavioral1
Sample
5dd09c4582695625426414130bf4caf8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5dd09c4582695625426414130bf4caf8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5dd09c4582695625426414130bf4caf8_JaffaCakes118
Size
30KB
MD5
5dd09c4582695625426414130bf4caf8
SHA1
481b4d951b91f9adc63865dac1b0607708141873
SHA256
58c14f237f6a572c891f195ae8107d1d3c4843164b8c506e8b85e32387ff9421
SHA512
48a8eb5ffba9e1123766fdae863247b59cb25b439de213fc0975548348d44890531603ec82bebad09813b73a598fadfb92b27bc2215838677d4a18d5d74d6ece
SSDEEP
768:jW0DLFNk/02jmOQCshYa0v+bvpgm5sHQrL8oyhI:jW0rm5j5QCshYaaavpgm5YQrwoh
Checks for missing Authenticode signature.
resource |
---|
5dd09c4582695625426414130bf4caf8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
FreeLibrary
LoadLibraryA
GetTempPathA
Sleep
ExitProcess
WritePrivateProfileStringA
CloseHandle
WriteFile
CreateFileA
GetLocalTime
GetComputerNameA
GetPrivateProfileStringA
GetVersionExA
VirtualProtect
WideCharToMultiByte
IsBadReadPtr
GetSystemTime
GetTickCount
ReadFile
GetCurrentDirectoryA
GetCurrentProcessId
CreateThread
CreateSemaphoreA
GetStringTypeW
GetStringTypeA
GetModuleHandleA
GetCurrentProcess
GetProcAddress
lstrlenA
HeapAlloc
GetProcessHeap
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
wsprintfA
CharLowerBuffA
DllMain
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ