LepAllocJob
LepBeginJob
LepFreeJob
Static task
static1
Behavioral task
behavioral1
Sample
3b3f72df627167dc2ab78102b39bec70_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3b3f72df627167dc2ab78102b39bec70_JaffaCakes118
Size
112KB
MD5
3b3f72df627167dc2ab78102b39bec70
SHA1
7ba4d8d34824c1bbd247bf26330fad9e20c1829f
SHA256
be45187dd15d878dbee79bf3da552a81f06ecfbc07187532ac02ea0618ef5d9e
SHA512
852145a6a3d013ec89c0ad112d322fcd05237b80c662e39478b9f81b5aed56485d337f988b1a6b7bac066f9e2496ee86aee3d1eb3f728be3330a503e08a1d828
SSDEEP
1536:QasuzcvYHL+4ecT80a9QbNdnPCopA5iXGgWBAQL5XUHzaAcdbFhyP2NwcVCFw:PsuqOL+nWNVaAkBlJeXceFw
Checks for missing Authenticode signature.
resource |
---|
3b3f72df627167dc2ab78102b39bec70_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedCompareExchange
GetStdHandle
EnumSystemLocalesA
CompareFileTime
VerLanguageNameW
DeleteVolumeMountPointA
OpenFileMappingW
GlobalSize
CreateConsoleScreenBuffer
SetLocaleInfoW
GetAtomNameA
VirtualAlloc
GetLocalTime
WaitCommEvent
GetPrivateProfileIntW
CancelTimerQueueTimer
GlobalUnWire
GetVolumeInformationW
_lread
GetLongPathNameA
DeleteTimerQueueEx
CreateNamedPipeW
GlobalFree
ReadConsoleA
GetComputerNameExA
GetLastError
FindVolumeClose
DeleteCriticalSection
EscapeCommFunction
FreeLibraryAndExitThread
CreateTapePartition
VirtualProtect
ReleaseMutex
ReleaseSemaphore
FillConsoleOutputCharacterW
GetFileInformationByHandle
LocalUnlock
toupper
puts
LepAllocJob
LepBeginJob
LepFreeJob
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ