dwnld
getidex
scomps
Static task
static1
Behavioral task
behavioral1
Sample
ecee5ccab5b871fddf0a3b80d6bff1f7_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecee5ccab5b871fddf0a3b80d6bff1f7_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ecee5ccab5b871fddf0a3b80d6bff1f7_JaffaCakes118
Size
18KB
MD5
ecee5ccab5b871fddf0a3b80d6bff1f7
SHA1
cd1cb0781031062587eaacf821c7491fa9167713
SHA256
bc31e9de9f9116f8b95f228d3a8c5295bedb4e607b10e963fd47a0ce1e83ba8e
SHA512
7614d1005fa0fd315025227adaab75ebaa57b9ed407c3ecef27f5e6ac3231cc623cbe55b870dadd49c9500da36172e293144bf339457bf3394a7b5e1b87faa14
SSDEEP
384:NkdqbTLLEoqmoEEjsIjjOKdLSI1RW29Zj4NLn6J+vnb:NkdUgyDEjsIjFD1d9Zj4tn6J+vb
Checks for missing Authenticode signature.
resource |
---|
ecee5ccab5b871fddf0a3b80d6bff1f7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcessHeap
HeapFree
HeapReAlloc
GetTempFileNameA
GetTempPathA
MulDiv
GetTickCount
CloseHandle
WriteFile
ReadFile
CreateFileA
DeleteFileA
WaitForMultipleObjects
WaitForSingleObject
CreateEventA
HeapAlloc
GetModuleFileNameA
InterlockedExchange
RtlUnwind
GetProcAddress
lstrlenA
CreateProcessA
ExitThread
CreateThread
GetLastError
SetEvent
GlobalAlloc
lstrcpynA
lstrcpyA
SetFilePointer
GlobalFree
VirtualQuery
RegisterWindowMessageA
SetDlgItemTextA
MessageBoxA
wsprintfA
SetWindowTextA
SendMessageA
ShowWindow
CloseWindow
SetParent
CharLowerBuffA
PeekMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
FindWindowExA
GetDlgItem
GetFocus
IsWindowVisible
GetClientRect
GetWindowRect
CreateWindowExA
GetWindowLongA
EnableWindow
DestroyWindow
CallWindowProcA
SetWindowLongA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegEnumValueA
RegQueryValueExA
InternetConnectA
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetSetFilePointer
InternetCrackUrlA
FindCloseUrlCache
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
HttpOpenRequestA
HttpSendRequestA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
dwnld
getidex
scomps
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ