DllMain
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
c75df025b757db412ee0c0f325125c10_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c75df025b757db412ee0c0f325125c10_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c75df025b757db412ee0c0f325125c10_JaffaCakes118
Size
170KB
MD5
c75df025b757db412ee0c0f325125c10
SHA1
954cb3e74ab7c3ac49941190affffbe3c5d54f32
SHA256
4d73eecd1db68515f1c736cd5d0c27b63141c9f69ad0d7b2a44c6b14746c530b
SHA512
f6b395c0ee34c79e067fab4d41f1a18a462903542a7e479b36194656644485b385a57cdb3773f04e8b3fba6ad4c2d14526c438cd6f230697283943ce97824cca
SSDEEP
3072:h4WMNZZixGKQaVLJgzG3my7cOx49hTuZlsDQLqqvrCh7:h4W+ZiPnLBmyoOMTuZlsdSuJ
Checks for missing Authenticode signature.
resource |
---|
c75df025b757db412ee0c0f325125c10_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
lstrlenA
GetProcAddress
LoadLibraryA
FreeLibrary
GetOEMCP
FreeEnvironmentStringsA
SetFilePointer
SetStdHandle
FlushFileBuffers
CloseHandle
GetCommandLineA
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
lstrcpyA
GetCPInfo
GetACP
HeapFree
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetLocaleInfoA
GetLocaleInfoW
VirtualAlloc
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException
ord192
ord174
ord134
ord163
ord196
ord179
ord190
ord191
ord189
ord188
DllMain
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ