ima_free
ima_to_ascii_16z
ima_to_ascii_lz
ima_to_unicode_lz16z
Static task
static1
Behavioral task
behavioral1
Sample
b3813869c9a05245ac140080b272418e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3813869c9a05245ac140080b272418e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b3813869c9a05245ac140080b272418e_JaffaCakes118
Size
36KB
MD5
b3813869c9a05245ac140080b272418e
SHA1
85cafbf966d2ac6a639e829efb9628c6c7d83c2b
SHA256
1626cc71606ed192b47f070bb5984d3631c3e57c13d54a3bba8bd9fbd3b08648
SHA512
0ebf252e6d1d0f9fd707d7c3940124d56611592f506d678c831b54f5e368a3b9c573f9ab072fd112b5abf7ce201a6a84bc2163cee676d35b669a5cb792c675d1
SSDEEP
384:AmnG08xrv368TYzTmlFVVkT6a8/Qjxy0yl+iGvo9DpG:FGxYKeT6rQjxrRNvo9DpG
Checks for missing Authenticode signature.
resource |
---|
b3813869c9a05245ac140080b272418e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TlsFree
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
MultiByteToWideChar
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
idna_to_unicode_lz16z
idn_free
idna_to_ascii_16z
ima_free
ima_to_ascii_16z
ima_to_ascii_lz
ima_to_unicode_lz16z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ