_LibMain@12
load
Static task
static1
Behavioral task
behavioral1
Sample
b2ee6c03ed5c5f95700d960e6ddfa4da_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b2ee6c03ed5c5f95700d960e6ddfa4da_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b2ee6c03ed5c5f95700d960e6ddfa4da_JaffaCakes118
Size
10KB
MD5
b2ee6c03ed5c5f95700d960e6ddfa4da
SHA1
7adae68ced267951cf619e6a28b0d78a86c64ccd
SHA256
f76f7f25b5fc18b4e18779367f3e3113acec6dc80db03e49db6545fcb087cc7f
SHA512
3c5704b82c0cde6a24e6b45bb7595c4bcc6e985d71daf92352593d86987379ead481ee931e048aeb4b022cfd3f47396484efcd9c7cfd1befc1481401fcb48d16
SSDEEP
96:l/EKVqTxviExwnbVhwxykel00dcbY3UR7K27ajbLZYfBBcsFo2Y33p:l/B+xv1xwbXwxykM41hJajJ4BcQtc
Checks for missing Authenticode signature.
resource |
---|
b2ee6c03ed5c5f95700d960e6ddfa4da_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetCloseHandle
InternetGetConnectedState
InternetOpenA
InternetOpenUrlA
InternetReadFile
ShellExecuteA
ExitProcess
ExpandEnvironmentStringsA
GetEnvironmentStringsA
CloseHandle
MoveFileExA
OpenMutexA
CreateFileA
RtlUnwind
CreateMutexA
WinExec
WriteFile
lstrcpyA
lstrlenA
SetTimer
KillTimer
RegisterClassA
MessageBoxA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
PostQuitMessage
CreateWindowExA
DestroyWindow
SetWindowPos
DefWindowProcA
GetStockObject
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
_fdopen
_open_osfhandle
fclose
free
_cexit
malloc
printf
raise
setbuf
strcpy
_LibMain@12
load
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ