ThesaurusCheck
ThesaurusCloseLex
ThesaurusGetOptions
ThesaurusGetString
ThesaurusInit
ThesaurusOpenLex
ThesaurusSetOptions
ThesaurusTerminate
ThesaurusVersion
Static task
static1
Behavioral task
behavioral1
Sample
04d64c2f7d37445f03eead951ae3591a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04d64c2f7d37445f03eead951ae3591a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
04d64c2f7d37445f03eead951ae3591a_JaffaCakes118
Size
108KB
MD5
04d64c2f7d37445f03eead951ae3591a
SHA1
b1974f9ccb37c850059c94eaed0d5ac2482ab42d
SHA256
24e263ff2c0e7e7e5d33b1ea94bd025956ce5ea9ed96d91f4cff40cd6c8a6737
SHA512
786fa470d0e5086e963d112fdf45c7a82ce8f8329364bf4dfc0bbc95151b37a47633f40ab67ddc694b6e055edb5a1ec85bf895eaaec51a5caed9440ea0d48776
SSDEEP
1536:tDjc4CJQYATu93K6PaGQ0coDYPyptW3P:tPz7YzBDQ0cMYPyptW3
Checks for missing Authenticode signature.
resource |
---|
04d64c2f7d37445f03eead951ae3591a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetLastError
GetLocaleInfoA
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
GetLastError
CloseHandle
SetFilePointer
ReadFile
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
DisableThreadLibraryCalls
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
RtlUnwind
SetEndOfFile
ThesaurusCheck
ThesaurusCloseLex
ThesaurusGetOptions
ThesaurusGetString
ThesaurusInit
ThesaurusOpenLex
ThesaurusSetOptions
ThesaurusTerminate
ThesaurusVersion
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE