l_Abs
l_pAdvise
l_pFreeMarshalStream
l_pMarshalPtrInProc
l_pModuleGetClassObject
l_pModuleInit
l_pModuleRegisterClassObjects
l_pUnadvise
l_pUnmarshalPtr
Static task
static1
Behavioral task
behavioral1
Sample
6a4ef22309c44a2107ec5d00c4349e2b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a4ef22309c44a2107ec5d00c4349e2b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6a4ef22309c44a2107ec5d00c4349e2b_JaffaCakes118
Size
52KB
MD5
6a4ef22309c44a2107ec5d00c4349e2b
SHA1
4b72ac774eff9ad174a5c1bd767fa38ab5da3fd2
SHA256
c5e6a4008b125feab2055602623d08eedbe85a4ab5f87b9734c98d382bd38b22
SHA512
a295610aab9c5106c000be9946d6a5d8f3630e2c2525383006cb1b118501ddf1fef20c98a89747fb010c1f23055565904ac4468e751c7dbf5f6fd61826dc8f62
SSDEEP
768:cs3Bh48PTSi9ib1GPqmzV1cXSHuor+aiYZybnDtgycazXo9fJbcV5Wp1:cs3xT5iZGPVXiUr+pYZybnNtbol7
Checks for missing Authenticode signature.
resource |
---|
6a4ef22309c44a2107ec5d00c4349e2b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
lstrcmpiA
GetProcAddress
LoadLibraryA
VirtualFree
GetSystemTimeAsFileTime
CreateEventA
GetCurrentThreadId
SetErrorMode
GetCommandLineA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
RtlUnwind
GetForegroundWindow
GetSystemMetrics
wsprintfA
l_Abs
l_pAdvise
l_pFreeMarshalStream
l_pMarshalPtrInProc
l_pModuleGetClassObject
l_pModuleInit
l_pModuleRegisterClassObjects
l_pUnadvise
l_pUnmarshalPtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ