_LibMain@12
load
Static task
static1
Behavioral task
behavioral1
Sample
86549a3e3c82b377719a91948c28ca71_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
86549a3e3c82b377719a91948c28ca71_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
86549a3e3c82b377719a91948c28ca71_JaffaCakes118
Size
15KB
MD5
86549a3e3c82b377719a91948c28ca71
SHA1
4b923a5f92464dfa094a28642507c53cbc9e50e0
SHA256
3437eeae1d6cdd4273a3fd8101f7a9ff6e91ba29ddbcc98ec1074635b5ba6f7b
SHA512
78b8d139564919e8943cb533faeff3272ead6509a12684561af02907fa773b1ef74d5c4ea5bece2f3b6fe4554b8b8e9d40a9d82ac3dad358752313a70b5377e7
SSDEEP
192:u/RlTAjc0PhWqsxNEXWQtmPerWPcG0oaBFqoAuxtPxlwZoPALO:yRlMjc0P0KG4ULPcBxBFqoAAtPxWGAL
Checks for missing Authenticode signature.
resource |
---|
86549a3e3c82b377719a91948c28ca71_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ShellExecuteA
Shell_NotifyIconA
CoCreateInstance
CoInitialize
CoUninitialize
ExitProcess
ExpandEnvironmentStringsA
GetEnvironmentStringsA
MoveFileExA
MultiByteToWideChar
OpenMutexA
RtlUnwind
RtlZeroMemory
CreateMutexA
lstrlenA
SetTimer
KillTimer
LoadIconA
MessageBoxA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
RegisterClassA
PostQuitMessage
CreateWindowExA
DestroyWindow
DefWindowProcA
GetStockObject
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegCreateKeyA
RegCreateKeyExA
RegCloseKey
RegFlushKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
_fdopen
_open_osfhandle
fclose
_cexit
malloc
raise
setbuf
strncpy
_LibMain@12
load
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ