start
stop
Static task
static1
Behavioral task
behavioral1
Sample
ecbe3b232e5e3f459b2508e32ccf0547_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ecbe3b232e5e3f459b2508e32ccf0547_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ecbe3b232e5e3f459b2508e32ccf0547_JaffaCakes118
Size
83KB
MD5
ecbe3b232e5e3f459b2508e32ccf0547
SHA1
f5bef07a7bd8f2c86b69d3bea9489ead2076947d
SHA256
27c5f755563a41f77c37c753c2a70623a02e860a4ea863bbb97d5aab605a0252
SHA512
f542052880eb3698af26015a6659c6e669441827bb394486cc475e5993cba9c7c1acc0dd361e90a37e2e2c3f0ff38abc1bcc936bf49798a9a67f4155ad1305de
SSDEEP
1536:E/kFFFLGLgra3e3SJF+VPoUbAxBUg1nSmJU2fC/mEJDsKFwFQKQWhR9NDWwlhpXl:ckNLGN3/F+VXbAxbp/U2P4sKuPQWhbIK
Checks for missing Authenticode signature.
resource |
---|
ecbe3b232e5e3f459b2508e32ccf0547_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
SysFreeString
WSACleanup
URLDownloadToFileA
start
stop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE