DllMain
L_BrowseDir
Static task
static1
Behavioral task
behavioral1
Sample
d6470ece77a4e6577fbacd3e46f1aed7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6470ece77a4e6577fbacd3e46f1aed7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d6470ece77a4e6577fbacd3e46f1aed7_JaffaCakes118
Size
87KB
MD5
d6470ece77a4e6577fbacd3e46f1aed7
SHA1
6de28f030037aac3ca3efb9a9a9d54a0a9a64472
SHA256
f275a400d4fb4753221a2056e2e0000d8e46813b9e19645c2379d265f31dfaaf
SHA512
96c38eb6981cc141ed8c6c1ce3c20366b3f1f0ff8d9d9374155d68d0dd6ad9fa366f7cce567a0f588d66d0c16846a121fc00766d9acf2e7991dfef3f795eaa73
SSDEEP
1536:wzlF3rt/iHVT3vepgejQMaQn2AMDA1JwrAEtXvX3ihJqeeibDKO:wzlFVqVTepgUzeAjU9XvHiHqHwK
Checks for missing Authenticode signature.
resource |
---|
d6470ece77a4e6577fbacd3e46f1aed7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualFree
FindNextFileA
lstrcatA
lstrlenA
lstrcpyA
lstrcmpA
GetLastError
FindFirstFileA
GetModuleFileNameA
GetStartupInfoA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
FindClose
SetHandleCount
GetFileType
GetStdHandle
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
HeapFree
HeapAlloc
VirtualAlloc
ord105
ord100
ord185
ord125
DllMain
L_BrowseDir
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ