GetPluginInfo
LibMain
PluginFunc
Static task
static1
Behavioral task
behavioral1
Sample
abd438aaf14eadf17d51853dcfbd8737_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
abd438aaf14eadf17d51853dcfbd8737_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
abd438aaf14eadf17d51853dcfbd8737_JaffaCakes118
Size
50KB
MD5
abd438aaf14eadf17d51853dcfbd8737
SHA1
e7ffadfe42ac8022fc81e63486c2660767832025
SHA256
930cf1fa2b8be159f203ccab3de1f72c539d8d11f013886be8a94ca99f6bb6d0
SHA512
3f2397aa6a149768dc9c15ab327ec568bd53acab8699f86b9d3b4181bcbd0b6acd680467554655e77e59db9496b15830f6a66384c8e5cd767e6d38e917da31ba
SSDEEP
384:bAEpMS7v1OiXpJl9PjcoME9IRB4et4BvXZuVlMcCIvW01:bAEdv1OiXpr9Pjco99IRB4VvXZyl/v
Checks for missing Authenticode signature.
resource |
---|
abd438aaf14eadf17d51853dcfbd8737_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetEnvironmentStringsA
GetFileAttributesA
GetFileSize
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetStartupInfoA
GetSystemTime
OpenEventA
CreateEventA
PeekNamedPipe
CreateFileA
ReadFile
RtlUnwind
SetEvent
SetFilePointer
Sleep
TerminateProcess
TerminateThread
CreatePipe
CreateProcessA
WaitForSingleObject
CreateThread
_fdopen
_open_osfhandle
_stricmp
atoi
atol
fclose
_cexit
malloc
memset
printf
raise
setbuf
sprintf
strcat
strcpy
strncpy
strrchr
strstr
strtok
htons
listen
recv
select
accept
send
shutdown
socket
bind
closesocket
WSAStartup
WSACleanup
htonl
GetPluginInfo
LibMain
PluginFunc
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE