DllMain
Main
before1main
prestart
start
Static task
static1
Behavioral task
behavioral1
Sample
8316f58be0dbb44dd1c290d06ab1ba8f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8316f58be0dbb44dd1c290d06ab1ba8f_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
8316f58be0dbb44dd1c290d06ab1ba8f_JaffaCakes118
Size
23KB
MD5
8316f58be0dbb44dd1c290d06ab1ba8f
SHA1
360572495052f483eafe44a433a4c8804982ebfb
SHA256
c18408f2f72e0060557260af07363ecf53834a539385cc47bef9d05ae0019964
SHA512
f51329f30e01d3a7f6f13397f1e4c2d84f4d892359e542cfccc94eaee71361327634a5bb1e4679c01fc5022e873504ddf2e80b160c9be16db665b90434c4a8f1
SSDEEP
384:ddQVoG64uEkbCj1J/VBQvPHMbk/M6MkGiJk1Jk4:XQPtXkbCj7/UHMb3vpIoP
Checks for missing Authenticode signature.
resource |
---|
8316f58be0dbb44dd1c290d06ab1ba8f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
GetVolumeInformationA
LoadLibraryA
MultiByteToWideChar
Sleep
WideCharToMultiByte
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
_strnicmp
__dllonexit
_errno
_itoa
atoi
fflush
free
malloc
memcpy
memset
strchr
strlen
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
SysAllocStringByteLen
VariantInit
wsprintfA
DllMain
Main
before1main
prestart
start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ