DllMain
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
38645d59853d2b309798f3836778db12_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
38645d59853d2b309798f3836778db12_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
38645d59853d2b309798f3836778db12_JaffaCakes118
Size
76KB
MD5
38645d59853d2b309798f3836778db12
SHA1
919dcb1bb27eadd7e1dd530d8f87fc632517047b
SHA256
b757e07c5babb3f1c3233f27cf7b3df14155ae7ab9ca090190281a1a5b468aaa
SHA512
40e4b644314a6985ee05826b9622a47ea7369b49dabce47aa433faa9a5d096eacec735da5b92a618a238f43e8717dc78c10141de3a8d18a2bacb40316a9825df
SSDEEP
1536:plkM39sSCgsqVS3imWv/1noxNPH/UO5BVNqwwf1:zkMN/mqVS3imWnpo/PfUO5Bnqn
Checks for missing Authenticode signature.
resource |
---|
38645d59853d2b309798f3836778db12_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualFree
SetHandleCount
lstrcpyA
LoadLibraryA
VirtualAlloc
HeapAlloc
HeapFree
WriteFile
WideCharToMultiByte
GetEnvironmentStringsW
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
FreeEnvironmentStringsW
GetCPInfo
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
ord192
ord189
ord312
ord282
ord283
ord188
ord190
ord191
DllMain
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ