DllMain
cbkak
pdrkxfg
ummpuy
wshbp
Static task
static1
Behavioral task
behavioral1
Sample
cf4b53cd5780b29ae8fa6fd68328f093_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cf4b53cd5780b29ae8fa6fd68328f093_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cf4b53cd5780b29ae8fa6fd68328f093_JaffaCakes118
Size
25KB
MD5
cf4b53cd5780b29ae8fa6fd68328f093
SHA1
7b39131b645f0e2a8fd958724670de558eaacc3c
SHA256
13e9fd139b8ca5c64e7ff1dc059964d872c982502fad7dfa43c4335f140132c4
SHA512
734f06151a6b75353e0162320a2fd6ba76afa61dd96afaf158170e49d850362304ce6976530fd68db0c847f419afc0065fc9851fa9f3539b320e4167ee846c49
SSDEEP
384:2AamGafdansOWnsPqxRtu/uEm0J8RlmVzJLSES0JdsjpTTu21uEHYkGeM:nosOc10/mK83mVNLIgkBu5tp
Checks for missing Authenticode signature.
resource |
---|
cf4b53cd5780b29ae8fa6fd68328f093_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
MultiByteToWideChar
Sleep
WideCharToMultiByte
lstrcatA
lstrcpyA
lstrlenA
_strnicmp
__dllonexit
_errno
_itoa
atoi
fflush
free
malloc
memcpy
memset
strchr
strlen
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
SysAllocStringByteLen
VariantInit
DllMain
cbkak
pdrkxfg
ummpuy
wshbp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ