?log_textFile@@YGJHPAD@Z
GetLogLevelParam
log_inf
Static task
static1
Behavioral task
behavioral1
Sample
b3759fc51844398af27d92f729591981_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3759fc51844398af27d92f729591981_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b3759fc51844398af27d92f729591981_JaffaCakes118
Size
60KB
MD5
b3759fc51844398af27d92f729591981
SHA1
8edb536d38e47578f0de4f61c8e05a6c5794ff1d
SHA256
2f954576c8dc3793eba53e62e4f1cc3c20a0a8f328c2befd43fcc2c2622d91ef
SHA512
d4919da3450bc9fb5379ea14d43568221b74e949541834ddda5393d42d7a994abc6a370c90a7578976eb2cc891b2a390e91f639bb2eeaa46085608eea628ffda
SSDEEP
768:Lqx2nwnq+iXmjFQizL3NKiTik9dCxkL9p4cJlQ+7dkQVaGeo53dv4:LsHP/dKiTiOCxGaIHrso5dv
Checks for missing Authenticode signature.
resource |
---|
b3759fc51844398af27d92f729591981_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
GetPrivateProfileIntA
GetCurrentDirectoryA
CloseHandle
GetFileSize
CreateFileA
GetLocalTime
WriteFile
SetFilePointer
GetPrivateProfileStringA
InitializeCriticalSection
SetErrorMode
DeleteCriticalSection
DisableThreadLibraryCalls
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapFree
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
GetStringTypeA
GetStringTypeW
FlushFileBuffers
?log_textFile@@YGJHPAD@Z
GetLogLevelParam
log_inf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ