@Borlndmm@HeapAddRef$qqrv
@Borlndmm@HeapRelease$qqrv
@Borlndmm@SysFreeMem$qqrpv
@Borlndmm@SysGetMem$qqri
@Borlndmm@SysReallocMem$qqrpvi
DumpBlocks
FreeMemory
GetAllocMemCount
GetAllocMemSize
GetHeapStatus
GetMemory
ReallocMemory
Static task
static1
Behavioral task
behavioral1
Sample
a9aa80913481b04365004e23e6def5eb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a9aa80913481b04365004e23e6def5eb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a9aa80913481b04365004e23e6def5eb_JaffaCakes118
Size
22KB
MD5
a9aa80913481b04365004e23e6def5eb
SHA1
2334bc73cc92f373397adccf1fff276e8583c6c2
SHA256
9cbb6abfbf67df5dd2ad66c3e7d9db03111dd04e38db2c0470044bf64d11fd42
SHA512
3160d3d4365c1de53756c7c066655824e392676c533e3d8d8ba0f2668bf380113081ba1448263545643d5c9f1655b4f1ecae2d7bf53b3f0cb93fdfe049020b49
SSDEEP
384:7t9kMq7qiRQW9UzLs91i45ZWpDahlzuIqo0EzrEKAz+vw7:EMq7qOQWWzIhI+hYIqvE3Ez+c
Checks for missing Authenticode signature.
resource |
---|
a9aa80913481b04365004e23e6def5eb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
@Borlndmm@HeapAddRef$qqrv
@Borlndmm@HeapRelease$qqrv
@Borlndmm@SysFreeMem$qqrpv
@Borlndmm@SysGetMem$qqri
@Borlndmm@SysReallocMem$qqrpvi
DumpBlocks
FreeMemory
GetAllocMemCount
GetAllocMemSize
GetHeapStatus
GetMemory
ReallocMemory
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE