DllMain
ekdofk
hhhng
jxnrfr
khcclnh
Static task
static1
Behavioral task
behavioral1
Sample
c8ed475058f0723b127af66eabf6ac44_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c8ed475058f0723b127af66eabf6ac44_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c8ed475058f0723b127af66eabf6ac44_JaffaCakes118
Size
25KB
MD5
c8ed475058f0723b127af66eabf6ac44
SHA1
181edc381c090a71e29c73db80233c5df1c9f894
SHA256
cbc44af99fd83cf28179a021dda8212bb7f4caa61ad2c53eb3c514b93014ddde
SHA512
53857c5add7fb57b6902f9f665dca64b453fb304e60bdeba5bc82f179999c30fda23dbfada0e2ee74d95e121b6973d611621c63b701c59584ce791fd975dd048
SSDEEP
768:yjrHc4CFBJDM0rx2Ky86lUpKuvw0yuvw0:yjGHdM0oKNYU0ucu
Checks for missing Authenticode signature.
resource |
---|
c8ed475058f0723b127af66eabf6ac44_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
MultiByteToWideChar
Sleep
WideCharToMultiByte
lstrcatA
lstrcpyA
lstrlenA
_strnicmp
__dllonexit
_errno
_itoa
atoi
fflush
free
malloc
memcpy
memset
strchr
strlen
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
SysAllocStringByteLen
VariantInit
DllMain
ekdofk
hhhng
jxnrfr
khcclnh
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ