??0CLocalizedDll_main@@QAE@XZ
??4CLocalizedDll_main@@QAEAAV0@ABV0@@Z
?fnLocalizedDll_main@@YAHXZ
?nLocalizedDll_main@@3HA
Static task
static1
Behavioral task
behavioral1
Sample
fab40b90a579695d545abc0e92a05d49_JaffaCakes118.dll
Resource
win7-20240729-en
Target
fab40b90a579695d545abc0e92a05d49_JaffaCakes118
Size
272KB
MD5
fab40b90a579695d545abc0e92a05d49
SHA1
05850c949283e613e908de5b7c4d01249e47a866
SHA256
4b3f8827834e5c70323faabc4d9d262a349803ede951d6069a8489c8e5473d33
SHA512
a34f3a83690c8ca3a0812b709d1686d13fb11f3424b7a13d5ff89b04383fcd52e41dd73920b608ac1bf077eec69a9de8427c1c8053c8401e9b0c5b607a7b3e52
SSDEEP
3072:gznGCoBTZb/iLb0PM2SyrNHd0sxhVu+DI+fY0qiEMOOx0oIFC:gTyNbKcP5rDrY0q6x
Checks for missing Authenticode signature.
resource |
---|
fab40b90a579695d545abc0e92a05d49_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
GetCommandLineA
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
??0CLocalizedDll_main@@QAE@XZ
??4CLocalizedDll_main@@QAEAAV0@ABV0@@Z
?fnLocalizedDll_main@@YAHXZ
?nLocalizedDll_main@@3HA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ