_LibMain@12
enter
Static task
static1
Behavioral task
behavioral1
Sample
3f97008891c04c15a64893637853cfe3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3f97008891c04c15a64893637853cfe3_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3f97008891c04c15a64893637853cfe3_JaffaCakes118
Size
12KB
MD5
3f97008891c04c15a64893637853cfe3
SHA1
ac44f04adb4ba64ee0d2a391cd51e769127025bb
SHA256
11bcd3698842ccce0a32743d9963a8723bcd6821501811b6cca5d5547935e4e5
SHA512
3fc1614a6d837fd71b57bec55f315750d7027cd69123c8471e3a38e73a89b46d5674f462c813d8b08c74237f3cb1678c3d891bf2a50b5d832229aae276dd46f5
SSDEEP
192:MG0/ISBga+XopuELPCq4HTcpqKR/wkg9b29bM9BzLt8L7SWAtK:MlIFaY+NEHT02uM9Bz6L7SWAt
Checks for missing Authenticode signature.
resource |
---|
3f97008891c04c15a64893637853cfe3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
GetTcpTable
ExitProcess
ExpandEnvironmentStringsA
GetEnvironmentStringsA
GetLocalTime
CloseHandle
CopyFileA
LocalAlloc
LocalFree
OpenMutexA
OutputDebugStringA
CreateFileA
RtlUnwind
CreateMutexA
Sleep
WinExec
WriteFile
lstrcatA
lstrcpyA
DeleteFileA
SetTimer
KillTimer
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
PostQuitMessage
CreateWindowExA
DestroyWindow
SetWindowPos
DefWindowProcA
GetStockObject
RegCreateKeyExA
RegCloseKey
RegSetValueExA
_fdopen
_open_osfhandle
atoi
fclose
feof
fgets
fopen
fputs
free
fwrite
_cexit
malloc
memmove
printf
raise
setbuf
sprintf
strcmp
strcpy
strstr
vsprintf
_LibMain@12
enter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ