DllMain
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
a71e432f039f0356b594acadc27cbdcd_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a71e432f039f0356b594acadc27cbdcd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a71e432f039f0356b594acadc27cbdcd_JaffaCakes118
Size
118KB
MD5
a71e432f039f0356b594acadc27cbdcd
SHA1
11f3e1074107926b42a8c9eb3c18a447f59b3194
SHA256
4818f0c4424eb398cb083764f5155cc574d5c798c8039663be24fc0a9ac6b3c6
SHA512
741e810f45bcffdd9552522d65224b5ee2d7a87a9c594c3d1e3110acc88f143cfa85414110396df43627305d7952cbfa9b81c276258382d47e1622e71aa238ef
SSDEEP
3072:9z8OoAi2oXEYtLAbNiO5n7pHx95nIU6N:F8OnoXEWMNic7pHx9pI
Checks for missing Authenticode signature.
resource |
---|
a71e432f039f0356b594acadc27cbdcd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualFree
SetHandleCount
lstrcpyA
LoadLibraryA
VirtualAlloc
HeapAlloc
HeapFree
WriteFile
WideCharToMultiByte
GetEnvironmentStringsW
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
FreeEnvironmentStringsW
GetCPInfo
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
ord192
ord189
ord312
ord282
ord283
ord188
ord190
ord191
DllMain
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ