Ordinal1
Ordinal2
fOrdchk15311
Static task
static1
Behavioral task
behavioral1
Sample
b652c85db17606796ecd4339b7e58be6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b652c85db17606796ecd4339b7e58be6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b652c85db17606796ecd4339b7e58be6_JaffaCakes118
Size
56KB
MD5
b652c85db17606796ecd4339b7e58be6
SHA1
e7c645ada41b7164a9a92acff270168926fd0589
SHA256
ba8aafd97267846b0adb8d74a794b44765d14205d38cacf7262897604461295e
SHA512
c67711dad609c4fb8fc4b9c53bdb57b1cc40c5046ee60bcc977213813d0d2e2180f07c7145930e8d14784522fc38e0a78de7839fedf50efb9036bb3f5998efd8
SSDEEP
768:PZPf3uIr0KUYH31l9GFBqueIDqT5vQKnf2q/NtVTFhn5o9tuKG2:hPf+fUlGGufqVHOkNtVTFjoy3
Checks for missing Authenticode signature.
resource |
---|
b652c85db17606796ecd4339b7e58be6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTickCount
lstrlenA
lstrcatA
GetTempPathA
LoadLibraryA
lstrcmpiA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
CreateFileA
GetCommandLineA
GetStringTypeW
GetStringTypeA
GetVersion
HeapFree
GetLastError
CloseHandle
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
RtlUnwind
wsprintfA
Ordinal1
Ordinal2
fOrdchk15311
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ