DllMain
aoweou
fspgrh
lxdoc
uqirm
Static task
static1
Behavioral task
behavioral1
Sample
961eb3987e592326b9bea9af209d49e6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
961eb3987e592326b9bea9af209d49e6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
961eb3987e592326b9bea9af209d49e6_JaffaCakes118
Size
25KB
MD5
961eb3987e592326b9bea9af209d49e6
SHA1
80c95876df4dd5db4fd2aa4ba722f82c33776ac6
SHA256
840940cc8f87c1a6b61287619c70733cb668a53c2183f43a771195dd44be1231
SHA512
6c229ddff0ce0b5fb8419fbab0ed24a66cfd078a0df143d57c2e1eb7d234239e67df0cfa593b7c49a34a196a299cc177a03ffbbf285a2951059d2d69ea5570e5
SSDEEP
384:c7op3x1On1UgFvxkGYvbTbLnIngjZbiESaIyGFAOjqMZlKDt9kGFSBgXulSBgXu:dBzO/+GYnkgNb4adqqNDfpFSm+lSm+
Checks for missing Authenticode signature.
resource |
---|
961eb3987e592326b9bea9af209d49e6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
MultiByteToWideChar
Sleep
WideCharToMultiByte
lstrcatA
lstrcpyA
lstrlenA
_strnicmp
__dllonexit
_errno
_itoa
atoi
fflush
free
malloc
memcpy
memset
strchr
strlen
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
SysAllocStringByteLen
VariantInit
DllMain
aoweou
fspgrh
lxdoc
uqirm
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ