slAccel
slAdvise
slFreeMarshalStream
slMarshalPtrInProc
slModuleGetClassObject
slModuleInit
slModuleRegisterClassObjects
slUnadvise
slUnmarshalPtr
Static task
static1
Behavioral task
behavioral1
Sample
73f90a8da07e9053a56a5b487454d140_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
73f90a8da07e9053a56a5b487454d140_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
73f90a8da07e9053a56a5b487454d140_JaffaCakes118
Size
52KB
MD5
73f90a8da07e9053a56a5b487454d140
SHA1
2812c1b483f4426a2dd54a693798cfe548f95eb2
SHA256
db30de10406542280f6f0bc80f4b44672ce615387a5eb0514a12932f4c4f2332
SHA512
8bae4373514034e36e8fb2e92f3164a87efb2aaf4e906fbd159ea89618d38bc2a282b198d3dd786981b7a2992de20d0d06d9b9f629a3e41a9812054018507c40
SSDEEP
768:pMydf+QD9e9tJ+L562ZOILTt+yWcRXo9wYtWLaT:YQDMM562ZOIfF1owLc
Checks for missing Authenticode signature.
resource |
---|
73f90a8da07e9053a56a5b487454d140_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
lstrcmpiA
GetProcAddress
LoadLibraryA
VirtualFree
CreateEventA
GetCurrentThreadId
GetSystemInfo
SetErrorMode
GetCommandLineA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
RtlUnwind
GetSystemMetrics
wsprintfA
GetForegroundWindow
slAccel
slAdvise
slFreeMarshalStream
slMarshalPtrInProc
slModuleGetClassObject
slModuleInit
slModuleRegisterClassObjects
slUnadvise
slUnmarshalPtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ