DllMain
gukvkqs
lalado
ptmkcma
rmnov
yfsfqy
ysnxj
Static task
static1
Behavioral task
behavioral1
Sample
ce670c8f852995cc11a116723029c929_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ce670c8f852995cc11a116723029c929_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ce670c8f852995cc11a116723029c929_JaffaCakes118
Size
21KB
MD5
ce670c8f852995cc11a116723029c929
SHA1
fc5efc3502742aa5b1aec29dc3aecce382872a64
SHA256
2f903339a25eb2cf0841b5a4d943a762248298e40ecc9d804bacd4169d48a820
SHA512
67e4980397e9b83e53f85d245a35d1dbb1c63676e407f8dfc28778098ea519dfb446cbaf254e1facd7ba194bd715fa7cd128ae578d9cd16891118f3d326f50d3
SSDEEP
384:ZFPW2u0tXfDXUfTI7NItNkwBHB6xWFaolDbkrqNqjMPtRy:ZFxuo8s7NItNtZ8xWZbktYt
Checks for missing Authenticode signature.
resource |
---|
ce670c8f852995cc11a116723029c929_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetLastError
GetProcAddress
LoadLibraryExA
DllMain
gukvkqs
lalado
ptmkcma
rmnov
yfsfqy
ysnxj
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ