AnalyzeFile
GetTotalSignatures
IsDataBaseLoaded
Static task
static1
Behavioral task
behavioral1
Sample
ea7af4f7c057f9f319120caafb506b06_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea7af4f7c057f9f319120caafb506b06_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ea7af4f7c057f9f319120caafb506b06_JaffaCakes118
Size
186KB
MD5
ea7af4f7c057f9f319120caafb506b06
SHA1
bbbc112dc6932116e0ca34211ece01a4a1ac3fe9
SHA256
bf62874ce8d02bff6637d55af8f80bd25636e94bb27dadb8f9d01a9e33049cbe
SHA512
0a3299034301b5d820717f74171dd22fc743f7a744bc332bd73f969b839100fa75282b9c09cabb2515ece1c2dc17ae848714421408d955cb3225aabd1f306899
SSDEEP
3072:+hsoDAd0uh4LkACO7j0pvz/JNwAX6h1SvsE2lz+U+OUm:sAqu2kAtHAcxhsvsE2lz+0
Checks for missing Authenticode signature.
resource |
---|
ea7af4f7c057f9f319120caafb506b06_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
lstrcpyA
HeapFree
HeapAlloc
GetProcessHeap
lstrcatA
GetModuleFileNameA
lstrlenA
CloseHandle
lstrcpynA
ReadFile
CreateFileA
MapViewOfFile
CreateFileMappingA
GetFileSize
UnmapViewOfFile
FlushViewOfFile
IsBadReadPtr
HeapReAlloc
LCMapStringA
GetStringTypeW
RtlUnwind
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
LCMapStringW
CharUpperA
AnalyzeFile
GetTotalSignatures
IsDataBaseLoaded
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ