DllMain
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
11be58aa40d71b8ab2bf82a7078c03d7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11be58aa40d71b8ab2bf82a7078c03d7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
11be58aa40d71b8ab2bf82a7078c03d7_JaffaCakes118
Size
90KB
MD5
11be58aa40d71b8ab2bf82a7078c03d7
SHA1
e0f2da7ff61a9972c3fc56d845f87222630503aa
SHA256
ff2a7b99b0645c02bf5286e58c4ea1ab08478af72f065e1315ffaad55f32daa7
SHA512
2aa953999d09116f4e2f03929c3786b2dee8090b8797d3b6cfa0d32acca1ab39d90a868ebc7bbc5a83b8989bf7830975a3c46b314ba37016cdf556f3fca02bb5
SSDEEP
1536:hlB0sxYkAwpN9H+lkxuZXFpKkppB+0E6DaitOt3Uvnip3KtEoftvC:+sCkAwpNJ+lyE1r7vE6+2D/ezoftvC
Checks for missing Authenticode signature.
resource |
---|
11be58aa40d71b8ab2bf82a7078c03d7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentThreadId
GetProcAddress
SetErrorMode
lstrcpyA
GetModuleFileNameA
FreeLibrary
lstrcmpA
lstrlenA
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
SetHandleCount
VirtualFree
SetFilePointer
SetStdHandle
CloseHandle
FlushFileBuffers
VirtualAlloc
HeapFree
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCommandLineA
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
LoadLibraryA
SetLastError
GetLastError
HeapDestroy
HeapCreate
WideCharToMultiByte
WriteFile
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
wsprintfA
ord175
ord192
ord134
ord163
ord189
ord188
ord190
ord194
ord191
ord174
ord179
DllMain
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ