About
CalibrateDoc
GenConstant
PrepaireDoc
ReportInit
SimpleDoc
SimpleGen
Situation1
Situation2
Static task
static1
Behavioral task
behavioral1
Sample
f05656e95a1664b8054bbbc4fc246c47_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f05656e95a1664b8054bbbc4fc246c47_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f05656e95a1664b8054bbbc4fc246c47_JaffaCakes118
Size
48KB
MD5
f05656e95a1664b8054bbbc4fc246c47
SHA1
7ed6a839857c1c817e609f03bb0a25268c7f7b56
SHA256
a46869416a91c69955f62cc9b85589f80fe8741e3d2e9a8ccb957620535b5380
SHA512
6b11e7956ac0906d1d5c101e8ad74f3dd3544b2d3d003653181d9c62dfc92a66edfeff5e6fc6b38a4d771782f045a38601f1ead4bce49fd73cdc683c276907d1
SSDEEP
768:gQB3zSfgHT1CPlIUnrsb0hyeAbgbyDFXo99lJjF:hlzlHwPlbE0RAbg2loZ
Checks for missing Authenticode signature.
resource |
---|
f05656e95a1664b8054bbbc4fc246c47_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualFree
VirtualAlloc
lstrcmpiA
GetProcAddress
LoadLibraryA
GetSystemTimeAsFileTime
SetErrorMode
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
RtlUnwind
About
CalibrateDoc
GenConstant
PrepaireDoc
ReportInit
SimpleDoc
SimpleGen
Situation1
Situation2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ