DllMain
beforegttav
gttav
ppusk
preqqusk
Static task
static1
Behavioral task
behavioral1
Sample
fa1afdca3bb7c07a3a2edc70666e227c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa1afdca3bb7c07a3a2edc70666e227c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fa1afdca3bb7c07a3a2edc70666e227c_JaffaCakes118
Size
25KB
MD5
fa1afdca3bb7c07a3a2edc70666e227c
SHA1
e6f2309ea37ec25a1f5b18f308367e3d886ca2b4
SHA256
c65bf0df8ab9411f1344f3133e391fbb2e2537b2bbc55ea8a942b263e52ade06
SHA512
649b572390a9a5c0ba6c1ca672235be8e2cea333f69414cba17110a801fd0a0e4dc4a287fe34eff309134057445cfdbebd2576ab62a40916d3f196013c9cff72
SSDEEP
384:BvfPA4KRXLVeYNnbiQ6K/jBbvq1gk2BlFQlxUuAAT/kGd0A40A:Bvg4oN5OQ6ej1qik2KsKjpd949
Checks for missing Authenticode signature.
resource |
---|
fa1afdca3bb7c07a3a2edc70666e227c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
MultiByteToWideChar
Sleep
WideCharToMultiByte
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
_strnicmp
__dllonexit
_errno
_itoa
atoi
fflush
free
malloc
memcpy
memset
strchr
strlen
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
SysAllocStringByteLen
VariantInit
wsprintfA
DllMain
beforegttav
gttav
ppusk
preqqusk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ