OtlAdvise
OtlFreeMarshalStream
OtlMarshalPtrInProc
OtlModuleGetClassObject
OtlModuleInit
OtlModuleRegisterClassObjects
OtlUnadvise
OtlUnmarshalPtr
chk
Static task
static1
Behavioral task
behavioral1
Sample
86ea5dca3000c060b3163a5d2cb84647_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
86ea5dca3000c060b3163a5d2cb84647_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
86ea5dca3000c060b3163a5d2cb84647_JaffaCakes118
Size
48KB
MD5
86ea5dca3000c060b3163a5d2cb84647
SHA1
e80c2122f29c72823916a28e916e32c09b975161
SHA256
8be24b68917452f94dd55fc918f1d5e6a7632e8387f8d5f3f85fa0d8dcaf6f93
SHA512
7b7187a8bde377d84787bcc72430a352967117f936e6e4b5cd150e915c3c6d6426577a4b66b671823184da194c31e07a7af51c6db47694df1d1a7dfbf5b69eca
SSDEEP
768:TzEogajVYrYj1ER3TGAEZtkUz8AHpeoNiVyMczXo905NbCSq:3EejV0s1EZTWkUz8GpeoNF7boEN
Checks for missing Authenticode signature.
resource |
---|
86ea5dca3000c060b3163a5d2cb84647_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpiA
LoadLibraryA
GetProcAddress
VirtualFree
VirtualAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateEventA
SetErrorMode
GetCommandLineA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
RtlUnwind
GetForegroundWindow
GetSystemMetrics
wsprintfA
OtlAdvise
OtlFreeMarshalStream
OtlMarshalPtrInProc
OtlModuleGetClassObject
OtlModuleInit
OtlModuleRegisterClassObjects
OtlUnadvise
OtlUnmarshalPtr
chk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ