DllMain
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
3ed03ac14dd6e0179932ad41c3b4d874_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3ed03ac14dd6e0179932ad41c3b4d874_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3ed03ac14dd6e0179932ad41c3b4d874_JaffaCakes118
Size
90KB
MD5
3ed03ac14dd6e0179932ad41c3b4d874
SHA1
0ae212414d709ec0c6bb8d9b8f897d9e636dd925
SHA256
8eb5d86698e60f3d2b28c2753230e0f2a5805e5830ef9183e381bd347a3d2e48
SHA512
59479467aed290bba22b4e88467caa377c76036e8e00b17d1ed514a70820291bcde22a4409d884b990124985b23d81fc05b1a3d248e957d94028f77423081013
SSDEEP
1536:QlB0sxYkAwpN9H+lkxuZXFpKkppB+0E6DaitOt3Uvnip3KtEoftvC:HsCkAwpNJ+lyE1r7vE6+2D/ezoftvC
Checks for missing Authenticode signature.
resource |
---|
3ed03ac14dd6e0179932ad41c3b4d874_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentThreadId
GetProcAddress
SetErrorMode
lstrcpyA
GetModuleFileNameA
FreeLibrary
lstrcmpA
lstrlenA
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
SetHandleCount
VirtualFree
SetFilePointer
SetStdHandle
CloseHandle
FlushFileBuffers
VirtualAlloc
HeapFree
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCommandLineA
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
LoadLibraryA
SetLastError
GetLastError
HeapDestroy
HeapCreate
WideCharToMultiByte
WriteFile
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
wsprintfA
ord175
ord192
ord134
ord163
ord189
ord188
ord190
ord194
ord191
ord174
ord179
DllMain
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ