DllMain
fltInfo
fltLoad
Static task
static1
Behavioral task
behavioral1
Sample
f502424bcbf531470af3f98f1c3f77bd_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f502424bcbf531470af3f98f1c3f77bd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f502424bcbf531470af3f98f1c3f77bd_JaffaCakes118
Size
84KB
MD5
f502424bcbf531470af3f98f1c3f77bd
SHA1
4a62b28613a861f4c65d2613ceec9207a9ce1fc2
SHA256
8c52b3212f0f59664daf03df13e10e79388236ee3c98ea5a9599f383e2ff0926
SHA512
d90bf7fe85b74aeffcaeea88d954d9d52442aeb0081e9cf5eeea9f555436c4a43de948f0f2e97cd8d15b90807f1ebfb0e693418a90ed221c7525051302ea0343
SSDEEP
1536:t5EihX6n7yCbC0QPui+n2MgOk4L3QUi654A98pwALopNxeO76d6:tWzysCRGjJQi58p7opNv6d6
Checks for missing Authenticode signature.
resource |
---|
f502424bcbf531470af3f98f1c3f77bd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualFree
SetHandleCount
GetFileType
VirtualAlloc
HeapAlloc
LoadLibraryA
WriteFile
WideCharToMultiByte
HeapFree
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
lstrcpyA
GetACP
GetOEMCP
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
ord191
ord190
ord189
ord312
ord282
ord188
ord283
DllMain
fltInfo
fltLoad
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ