GetAuditionHwnd
ScanAudition
Static task
static1
Behavioral task
behavioral1
Sample
e2c070dcca11ef9e7107e94b1747b894_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e2c070dcca11ef9e7107e94b1747b894_JaffaCakes118.dll
Resource
win10v2004-20231215-en
Target
e2c070dcca11ef9e7107e94b1747b894_JaffaCakes118
Size
36KB
MD5
e2c070dcca11ef9e7107e94b1747b894
SHA1
b61424b984a2f4e92c7a892504f92364812e666e
SHA256
e2703f3345f446372796bc14db94366f0c5007b4f8c5f157c6b67f8e45142cc5
SHA512
c9a3f1e1a502a712687e3ea76a087b5fe93afa68e2fc25000e59c9fc34f8a7836bbc101701f5e6a9a1ae03bac15b613aa64efe1754d704784777c9695946e47a
SSDEEP
384:2xeplpPxtpy5sS9gm41WWvveSoXVsoR/bgqtpZ/T:c4PxtWg9HeVFb7tpZ/
Checks for missing Authenticode signature.
resource |
---|
e2c070dcca11ef9e7107e94b1747b894_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
VirtualProtect
CreateThread
Sleep
GetModuleHandleA
UpdateWindow
CreateWindowExA
EndPaint
GetClientRect
BeginPaint
DefWindowProcA
MessageBeep
TranslateMessage
TranslateAcceleratorA
DispatchMessageA
GetMessageA
FindWindowA
LoadIconA
RegisterClassExA
SendMessageA
TextOutA
GetAuditionHwnd
ScanAudition
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ