fa
fc
Static task
static1
Behavioral task
behavioral1
Sample
e74c87b116b500a80871940a8526cd03_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e74c87b116b500a80871940a8526cd03_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e74c87b116b500a80871940a8526cd03_JaffaCakes118
Size
10KB
MD5
e74c87b116b500a80871940a8526cd03
SHA1
48d7cdb1b654a50bd52506c70e47343aa96ed14e
SHA256
738a8eef976c58aa5b8160070c3d93ac519d92cf3dc72cfb9d1548990d190c35
SHA512
df2e907f64a4010f02ef53c6c6d171daffbdd5eadd1d23a0fd42b699e8d8466f1f55aa74fe8b6d5046ae077cd23b4995ba5e86905513c9d3bd9f9df53dd4c6d8
SSDEEP
96:wWOkVN5qkTQnjMuGZ/73Xl/hr79CfEHhpfK0TBh7mmGE/hafnN/iD5y7r:wWOkVNKoZZhr/pfKSSmG3BiFy7
Checks for missing Authenticode signature.
resource |
---|
e74c87b116b500a80871940a8526cd03_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
Sleep
VirtualProtectEx
GlobalFree
ReadProcessMemory
WideCharToMultiByte
GlobalAlloc
IsBadReadPtr
GetPrivateProfileStringA
GetProcAddress
GetModuleHandleA
CreateThread
GetModuleFileNameA
GlobalLock
GetCurrentProcess
CallNextHookEx
SetWindowsHookExA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
_adjust_fdiv
malloc
_stricmp
_initterm
free
strcat
strrchr
??3@YAXPAX@Z
strcpy
??2@YAPAXI@Z
sprintf
strlen
strncpy
strchr
strstr
fclose
fread
fopen
memset
memcpy
strcmp
fa
fc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ