sabABImportGetItemData
sabABImportInitialize
sabABImportUninitialize
Static task
static1
Behavioral task
behavioral1
Sample
a89d1b0e9ea01cbee9b3ca0e2d592689_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a89d1b0e9ea01cbee9b3ca0e2d592689_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a89d1b0e9ea01cbee9b3ca0e2d592689_JaffaCakes118
Size
136KB
MD5
a89d1b0e9ea01cbee9b3ca0e2d592689
SHA1
987fe7e8e47ca927742a4ad33d03570e70deda85
SHA256
57bd7b4eb624370abafbb19f5538a1a3c07a41a4541966bccc8581f14ec17b35
SHA512
45d2dc2a51ac910dff6cc7c125dcc85e8bdf373c132eebd4c088ed33bda1e1b8bdb3d829ec0c72009bf57d3362bcd2a68f9d64790e122f91e30ac109e0e87679
SSDEEP
3072:7HYWh5kmx7JJl6FX25GcCdea2L+aO1jvWlktrd3:UCkSMFX2Adu6aUjelW
Checks for missing Authenticode signature.
resource |
---|
a89d1b0e9ea01cbee9b3ca0e2d592689_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrChrA
free
memcpy
memcmp
_wcsicmp
_strcmpi
wcslen
memset
__security_error_handler
_except_handler3
memmove
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
__CxxFrameHandler
_CxxThrowException
??2@YAPAXI@Z
??3@YAXPAX@Z
ExitProcess
lstrcpyW
WideCharToMultiByte
lstrlenA
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
lstrcpyA
GetCurrentThreadId
GetCurrentProcessId
lstrcmpiA
GetProcAddress
LoadLibraryA
FreeLibrary
lstrlenW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
ord129
ord17
ord174
ord140
ord13
ord75
sabABImportGetItemData
sabABImportInitialize
sabABImportUninitialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ