DllMain
fltDeletePage
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
1190ce6cb89c63d0f85bfeb17109ffdc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1190ce6cb89c63d0f85bfeb17109ffdc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
1190ce6cb89c63d0f85bfeb17109ffdc_JaffaCakes118
Size
86KB
MD5
1190ce6cb89c63d0f85bfeb17109ffdc
SHA1
edb1948edbfa962bb3c0499b45ae705b99aec8b8
SHA256
bbd625670d0c195bd6a39ede1def80631e1cf3213a84fe6497d2830586be65a0
SHA512
db97af161b04b77745859c8d13c8f0b2dd3cdd9fd030de4801d802ea6aa038cf951cd6c43f41dc9b3e29ff76abd9953a34a0b4138cd358985a0b9a58fd772c6f
SSDEEP
1536:Q/ODAwpdUzSyer0xhb14mOFjJATx4aGtD2KnrozRKwwvh:0fYdbr0xBKmOFjJAl4aE2KnUswsh
Checks for missing Authenticode signature.
resource |
---|
1190ce6cb89c63d0f85bfeb17109ffdc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyA
VirtualAlloc
HeapAlloc
HeapFree
WriteFile
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
ord192
ord189
ord312
ord125
ord188
ord282
ord283
ord191
ord190
DllMain
fltDeletePage
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ