DllMain
fltDeletePage
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
28f1c1dd1e7719448d18068cab16712d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28f1c1dd1e7719448d18068cab16712d_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
28f1c1dd1e7719448d18068cab16712d_JaffaCakes118
Size
124KB
MD5
28f1c1dd1e7719448d18068cab16712d
SHA1
cd26b5854e976e461f248cbaae96f59607d9d0fa
SHA256
eab0b30fd06715caeabf6c61f4c7652e7a1f5e0adb057aa45399e12f7dfb3436
SHA512
104014bc273357ff9d381684e07c3ebecd8ddc06fc46c2510df35d30b60bc53dab3b789976f12d0895f046b78c2f4f231b4dd0f8575fa89adaaab06021633191
SSDEEP
3072:mB+HNy31UAc94yC4HCm3L2Nuw4XTu83LNJ2Sm:mB2Qo+yC4HCmguw0b3a
Checks for missing Authenticode signature.
resource |
---|
28f1c1dd1e7719448d18068cab16712d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapCreate
VirtualFree
lstrcpyA
LoadLibraryA
VirtualAlloc
HeapAlloc
HeapFree
WriteFile
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
GetModuleFileNameA
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
ord192
ord189
ord134
ord163
ord125
ord188
ord282
ord283
ord191
ord190
DllMain
fltDeletePage
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ