AddCNS
AddCNSEx
AddCNSExOrder
AddWnd
DelCNSEx
DeleteName
Free
GetCount
GetName
Init
Lookup
Reset
Save
Set
Static task
static1
Behavioral task
behavioral1
Sample
e01bc409b52af258d1f5db94fd34c9ed_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e01bc409b52af258d1f5db94fd34c9ed_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e01bc409b52af258d1f5db94fd34c9ed_JaffaCakes118
Size
44KB
MD5
e01bc409b52af258d1f5db94fd34c9ed
SHA1
24a9666cc951b38edf7c88aa7de6de7b7e94e27e
SHA256
1ab84547ac78955519d07f8b8f72e64f9fa5d98605b1ce332df46dec9b1d853c
SHA512
486ec834d8fa914b15a3600b663d6a435445faebabf27f3edf9bcb63dbb531ecf71106729301913369a9295a644c2a0d53ebd4d06eee43fb5141d98991c20089
SSDEEP
384:HoP5YJZtxZB4sj3VJI5aZzwWmWM2a+kJI5lY9uWDFNf8UzW:HpNZ4M3VJIAKWM2a+kJ6Y9rDFNfry
Checks for missing Authenticode signature.
resource |
---|
e01bc409b52af258d1f5db94fd34c9ed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindClose
FindNextFileA
FindFirstFileA
CloseHandle
CreateFileA
DeleteFileA
lstrlenA
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
HeapCreate
GetProcessHeap
HeapDestroy
GetWindowsDirectoryA
GetVolumeInformationA
GetThreadLocale
SetThreadLocale
FindResourceA
LoadResource
LockResource
FreeLibrary
CopyFileA
LoadLibraryA
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameA
LoadStringA
RegEnumValueA
RegEnumKeyA
RegQueryInfoKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
??2@YAPAXI@Z
_strdup
_ltoa
_adjust_fdiv
_initterm
_onexit
__dllonexit
strstr
ftell
fseek
fopen
fread
fclose
memcmp
sprintf
strcat
_mbsicmp
strcpy
strtok
strchr
_EH_prolog
__CxxFrameHandler
strncat
_snprintf
??3@YAXPAX@Z
atoi
strcmp
atol
wcschr
memset
_stricmp
strlen
strncpy
free
memcpy
malloc
_except_handler3
AddCNS
AddCNSEx
AddCNSExOrder
AddWnd
DelCNSEx
DeleteName
Free
GetCount
GetName
Init
Lookup
Reset
Save
Set
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ