DllMain
beforegllav
gllav
ppusk
preppusk
Static task
static1
Behavioral task
behavioral1
Sample
a97e9d22c0e69d868a37c8706d1df534_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a97e9d22c0e69d868a37c8706d1df534_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a97e9d22c0e69d868a37c8706d1df534_JaffaCakes118
Size
25KB
MD5
a97e9d22c0e69d868a37c8706d1df534
SHA1
6a53068baeeaa1719679d4d24994b3f4ee369feb
SHA256
5d086a668d20730b892f48d2ea24ec233708eccb5bba305d85faf9ae83cdac16
SHA512
ae3063d2d87a97cbbe676efb509e6d9665c9dbec4f704ee61554534af22860b2143cff61f0830de97bff8c4a586a1aaf5d49fc8a50e3d81aa888786c399ab5c0
SSDEEP
384:EfftA0KM7XDunxv5w1/ZKU1ZT22w/zQAewscWLrkGAW1sW1:8l6MDDKNyKULink1wsJLrpAW1sW1
Checks for missing Authenticode signature.
resource |
---|
a97e9d22c0e69d868a37c8706d1df534_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
MultiByteToWideChar
Sleep
WideCharToMultiByte
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
_strnicmp
__dllonexit
_errno
_itoa
atoi
fflush
free
malloc
memcpy
memset
strchr
strlen
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
SysAllocStringByteLen
VariantInit
wsprintfA
DllMain
beforegllav
gllav
ppusk
preppusk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ