Foo
GetNotesNumberField
GetNotesStringField
NotesCloseDB
NotesFriendlyInit
NotesFriendlyTerm
NotesGetDBHandle
NotesGetNoteHandles
NotesIntfcGetNoteshNote
NotesReopenDB
SetNotesNumberField
SetNotesStringField
Static task
static1
Behavioral task
behavioral1
Sample
d02811824ba36b844c4b334c682aa51e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d02811824ba36b844c4b334c682aa51e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d02811824ba36b844c4b334c682aa51e_JaffaCakes118
Size
151KB
MD5
d02811824ba36b844c4b334c682aa51e
SHA1
6a563808069bbbcf9e48aaeb4d82a838b7a3b808
SHA256
563aa4783653a2be96958176e508e8bf53f1a1752f9c59fdd9188b2e76e7f46e
SHA512
cb19000518c8ceebe31205d9f4f8949a1ec0086eaedf309ae929805e6776db269a73c0d2a1b88d9316008ccd1c83e147c7ba69000a2e8b93c57f90b05ac53992
SSDEEP
3072:Hf7xhQnbsyOLcgCOLVqrNEGUr1+MCBe10NO58lSHSMES:Hf7QnYyZCVaEG8Kg088Q
Checks for missing Authenticode signature.
resource |
---|
d02811824ba36b844c4b334c682aa51e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord2001
ord2141
ord2050
ord2066
ord2051
ord2181
ord2177
ord391
ord2006
ord13
ord11
FreeEnvironmentStringsW
MultiByteToWideChar
SetFilePointer
SetStdHandle
CloseHandle
GetLocaleInfoW
lstrlenA
GlobalUnlock
GlobalLock
GlobalAlloc
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FlushFileBuffers
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
LoadLibraryA
GetLocaleInfoA
Foo
GetNotesNumberField
GetNotesStringField
NotesCloseDB
NotesFriendlyInit
NotesFriendlyTerm
NotesGetDBHandle
NotesGetNoteHandles
NotesIntfcGetNoteshNote
NotesReopenDB
SetNotesNumberField
SetNotesStringField
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ