Init
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Static task
static1
Behavioral task
behavioral1
Sample
d57399d58253449739cc4274d5b706ed_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d57399d58253449739cc4274d5b706ed_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d57399d58253449739cc4274d5b706ed_JaffaCakes118
Size
32KB
MD5
d57399d58253449739cc4274d5b706ed
SHA1
59387dabcc2c91fd9015563973ef7a9fd4ce9d53
SHA256
440ab360e7570c024f56beeecc74e95e341ae08dc6b9e977d706418235a2b84a
SHA512
12d6e06e9be2d518c61d51f2ef6e7a40d7cf6c057c99dc419a6bd2df1642fe9457b8c8597162a7cee4789bcef8256620557f580cfd4fd23cd8b9bbec95061e62
SSDEEP
768:dvfZawN28BUgBmZo2HTDuosaaAKXOPPPJ:1L28Guo4
Checks for missing Authenticode signature.
resource |
---|
d57399d58253449739cc4274d5b706ed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetModuleHandleA
ExitProcess
GetModuleFileNameA
WaitForMultipleObjects
GetDriveTypeA
GetLogicalDriveStringsA
CloseHandle
WriteFile
GetFileSize
SetFilePointer
VirtualFree
IsBadReadPtr
Sleep
CreateThread
GetCurrentProcessId
UnmapViewOfFile
MapViewOfFile
GetLastError
VirtualAlloc
ReadFile
MultiByteToWideChar
WideCharToMultiByte
GlobalFree
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalSize
GetCurrentProcess
ResumeThread
SuspendThread
WaitForSingleObject
ResetEvent
InterlockedIncrement
SetThreadPriority
GetPrivateProfileStringA
TerminateThread
strlen
atol
strchr
_except_handler3
strstr
strcat
strcpy
sprintf
memcpy
memset
??3@YAXPAX@Z
strrchr
free
realloc
wcslen
??2@YAPAXI@Z
wcscmp
malloc
rand
_strupr
_strlwr
_strcmpi
_ltoa
Init
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ