DllMain
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
ad3ff9b49f5734494a09931f0fd13ea3_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ad3ff9b49f5734494a09931f0fd13ea3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ad3ff9b49f5734494a09931f0fd13ea3_JaffaCakes118
Size
81KB
MD5
ad3ff9b49f5734494a09931f0fd13ea3
SHA1
7469de761a900b4d7bd217a2bee5706962ac8be0
SHA256
114c435bcc90cc221c05675e1a50877ec8d644fb0c1333aa5fd37ace4127e48f
SHA512
caaa64846eb6c78357ded650f7c208e08e2a1427668d33aa86cfb2c1d91d8a72be5c49619563fd7b380b6c8bcb5a3814f165b2a056b4479187b7f18a56f82944
SSDEEP
1536:S9tlAAJ7F+pz+e5PU8UaD006CD+Lzsq5suUERxZGWkyRDunCD:0tlAAJJASeXfD03nktaRxsSRxD
Checks for missing Authenticode signature.
resource |
---|
ad3ff9b49f5734494a09931f0fd13ea3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualFree
SetHandleCount
GetFileType
SetStdHandle
CloseHandle
SetFilePointer
LoadLibraryA
VirtualAlloc
FlushFileBuffers
HeapAlloc
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
lstrcpyA
HeapFree
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
WriteFile
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ord134
ord192
ord189
ord188
ord163
ord174
ord190
ord179
ord191
DllMain
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ