Ordinal1
Ordinal2
fOrdchk43236
Static task
static1
Behavioral task
behavioral1
Sample
8234a4eebe4b54281b48537df8bc9d77_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8234a4eebe4b54281b48537df8bc9d77_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
8234a4eebe4b54281b48537df8bc9d77_JaffaCakes118
Size
52KB
MD5
8234a4eebe4b54281b48537df8bc9d77
SHA1
3828054abace8ae168586e16db62a65a3bdccfad
SHA256
38c24849b777e99a874636e0e57d2b4bface9ab316722e2f3190b7d5cceb38fd
SHA512
f281fc4e3749af2223a9f119c4c1dd96a1410d6525867dcc98a15fdd49bee01af3c6faf574f652b5876a2afb0c2555351dd15f1c555aeac66204802ccf42a111
SSDEEP
768:4DNLmBRBUuqpi61voz0x059PaQ31DMJtsLb1g/68PvHFsrKuo93Bl0:ymkv1wq0TCGMnsP6/DPvHFsoT+
Checks for missing Authenticode signature.
resource |
---|
8234a4eebe4b54281b48537df8bc9d77_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTickCount
DeleteFileA
lstrcatA
GetTempPathA
CreateEventA
lstrlenA
lstrcpyA
GetCommandLineA
VirtualProtect
LoadLibraryA
lstrcmpiA
GetProcAddress
VirtualFree
VirtualAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
GetVersion
HeapFree
GetLastError
CloseHandle
WriteFile
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
RtlUnwind
wsprintfA
GetSysColor
Ordinal1
Ordinal2
fOrdchk43236
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ