DllMain
fltDeletePage
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
972ea750954dad81f112926f15c68893_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
972ea750954dad81f112926f15c68893_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
972ea750954dad81f112926f15c68893_JaffaCakes118
Size
82KB
MD5
972ea750954dad81f112926f15c68893
SHA1
0b4c72aec2ae965b425e8d8a2ae754983e681b22
SHA256
15294d886bdca1c2a37724ad8289185439a6c286bc498ebbd6a0cec1f95eb2c1
SHA512
41addfcdc8404eb176437a511d0c8a2508a19dfd35bcd96b0f8e43906e0d90ec120fd840835a29d95fe75a7ed69cd6e083d9aa31402cf62928a7b782573d0e2f
SSDEEP
1536:COZEq++74Y1abGNtiMlZwLl6cEw3MdWOlYBiu0ucLRA0iorLE:7++McVsb13ROlHufce0i8E
Checks for missing Authenticode signature.
resource |
---|
972ea750954dad81f112926f15c68893_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapAlloc
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
GetModuleHandleA
GetVersion
WriteFile
WideCharToMultiByte
LoadLibraryA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetCPInfo
GetModuleFileNameA
GetACP
GetStdHandle
GetFileType
GetStartupInfoA
GetCurrentProcess
TerminateProcess
SetHandleCount
HeapFree
GlobalFree
GetCommandLineA
GetProcAddress
VirtualAlloc
HeapDestroy
HeapCreate
VirtualFree
ExitProcess
ord101
ord141
ord131
ord137
ord201
ord125
ord100
ord271
ord273
ord274
ord192
ord272
ord129
ord163
ord189
ord134
ord190
ord188
ord191
DllMain
fltDeletePage
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ