slAccel
slAdvise
slFreeMarshalStream
slMarshalPtrInProc
slModuleGetClassObject
slModuleInit
slModuleRegisterClassObjects
slUnadvise
slUnmarshalPtr
Static task
static1
Behavioral task
behavioral1
Sample
8b4ebbb9a464a8c4c86dad6cab5e73d4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8b4ebbb9a464a8c4c86dad6cab5e73d4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8b4ebbb9a464a8c4c86dad6cab5e73d4_JaffaCakes118
Size
52KB
MD5
8b4ebbb9a464a8c4c86dad6cab5e73d4
SHA1
8a2c181084cf105fa2373f1858b368cf015e99c0
SHA256
f1f2006444031f1b7eb5ea0cf387a292f5067090939238c32a707ee4c577256b
SHA512
ec501ed4ca5612591bc393aa1ccd3de82924fab821cd292d6b8d9ad2d6d048ed7470e4c17875bfff856cee2bbdbfae087a88980cfac3713eb6d0144b0cb61e8e
SSDEEP
768:r9bWjoZEe6iSlDB+1N2IuRlOILTt+yWcRXo9G9WLaT:r9bAoZETiS26vOIfF1o9Lc
Checks for missing Authenticode signature.
resource |
---|
8b4ebbb9a464a8c4c86dad6cab5e73d4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
lstrcmpiA
GetProcAddress
LoadLibraryA
VirtualFree
CreateEventA
GetCurrentThreadId
GetSystemInfo
SetErrorMode
GetCommandLineA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
RtlUnwind
GetSystemMetrics
wsprintfA
GetForegroundWindow
slAccel
slAdvise
slFreeMarshalStream
slMarshalPtrInProc
slModuleGetClassObject
slModuleInit
slModuleRegisterClassObjects
slUnadvise
slUnmarshalPtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ