DllMain
fltDeletePage
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
aeb29cd64ff813fc60dc371f1ea04fdf_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aeb29cd64ff813fc60dc371f1ea04fdf_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aeb29cd64ff813fc60dc371f1ea04fdf_JaffaCakes118
Size
96KB
MD5
aeb29cd64ff813fc60dc371f1ea04fdf
SHA1
e95960acdf624f974a1459ea18090a74973dd02c
SHA256
12934dece6fdc90c486b38e37580de83527464d800856ed6ac6497b7259d6c5e
SHA512
518919036112ad3cce71c3bace4ccd583b74eaa44eeaba53712e3a1771866a423de1037dc413c1ef0d169e7e72232cb687b895259daa3727c9e42e8cea327d19
SSDEEP
1536:PGw+cWs0bNRWmPUgHTQRlzYCQaDe2oiEM2wnAyucX7k2EI3ITj80kkm8dg9cwsV9:FkNUeTQRlzFQdJM2wacXX33y8U29cw29
Checks for missing Authenticode signature.
resource |
---|
aeb29cd64ff813fc60dc371f1ea04fdf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
LeaveCriticalSection
ExitProcess
SetStdHandle
CloseHandle
SetFilePointer
LoadLibraryA
FlushFileBuffers
WideCharToMultiByte
GetEnvironmentStringsW
WriteFile
GetEnvironmentStrings
FreeEnvironmentStringsW
GetOEMCP
GetACP
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetCPInfo
GetFileType
SetHandleCount
HeapFree
HeapAlloc
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
lstrcpyA
TlsSetValue
GetStdHandle
VirtualAlloc
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ord271
ord201
ord274
ord192
ord272
ord129
ord189
ord116
ord123
ord134
ord273
ord188
ord163
ord101
ord131
ord141
ord100
ord137
ord190
ord125
ord191
DllMain
fltDeletePage
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ