regaexec
reganexec
regaparams_default
regawexec
regawnexec
regcomp
regerror
regexec
regfree
regncomp
regnexec
reguexec
regwcomp
regwexec
regwncomp
regwnexec
tre_config
tre_have_approx
tre_have_backrefs
tre_version
Static task
static1
Behavioral task
behavioral1
Sample
0dfd83326825c3a539b6aeaabc3f6800_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0dfd83326825c3a539b6aeaabc3f6800_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0dfd83326825c3a539b6aeaabc3f6800_JaffaCakes118
Size
25KB
MD5
0dfd83326825c3a539b6aeaabc3f6800
SHA1
db628f136ea2778fd62a2fb4e855539ce309507d
SHA256
a5ae3deb94aee96564d3c366e1ad34e3e13eac118df7f44ba66a8db182abe136
SHA512
40c829cd09369dd2bef796fe42652b66118326988b57692a750cb1f49b0e04dc4da727777c7207e713fefcfdcff7ec45c1e630cba5ca16546ac97c5bf4150be4
SSDEEP
768:t73+vS945wp90ZNziTUS34iqNcpFgi4g:Mx5w/sH/iqNmgW
Checks for missing Authenticode signature.
resource |
---|
0dfd83326825c3a539b6aeaabc3f6800_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
towlower
wcsrtombs
regaexec
reganexec
regaparams_default
regawexec
regawnexec
regcomp
regerror
regexec
regfree
regncomp
regnexec
reguexec
regwcomp
regwexec
regwncomp
regwnexec
tre_config
tre_have_approx
tre_have_backrefs
tre_version
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE