check
copy
run
Static task
static1
Behavioral task
behavioral1
Sample
f09191b050378a1ef21eb305e06cf3a6_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f09191b050378a1ef21eb305e06cf3a6_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f09191b050378a1ef21eb305e06cf3a6_JaffaCakes118
Size
20KB
MD5
f09191b050378a1ef21eb305e06cf3a6
SHA1
e27cd64309730ff439ea7545a85e8d7acc82d7e0
SHA256
397d59ed96ab9e941bc57457cdf75a6a7139d66a760fa8067f57d515c2773ec7
SHA512
d77b6f88a8e9cb40129e2b9f926fe8333ece15789032aa3b89a90ceecce7aa72397ce867b433c04ab901bb353eb9725bd5729225fe576c1d27dda62e8820e272
SSDEEP
384:n8cOINJzp1EQ6KddP8kSymMikc2U6Nr+avjmz:n8crNT1x5SymHkc2UaNbi
Checks for missing Authenticode signature.
resource |
---|
f09191b050378a1ef21eb305e06cf3a6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapReAlloc
GetFileAttributesA
GetTempPathA
MultiByteToWideChar
GetTickCount
CloseHandle
WriteFile
ReadFile
CreateFileA
lstrcatA
lstrcmpA
SystemTimeToFileTime
GetLocalTime
SetFilePointer
CreateEventA
HeapFree
InterlockedExchange
RtlUnwind
HeapAlloc
GetModuleHandleA
GetProcAddress
ResetEvent
GetProcessHeap
GlobalAlloc
LoadLibraryA
VirtualQuery
GetLastError
lstrcpynA
lstrcpyA
GlobalFree
GetClientRect
ShowWindow
BeginPaint
wsprintfA
CallWindowProcA
DestroyWindow
RegisterWindowMessageA
SetWindowLongA
SetDlgItemTextA
MessageBoxA
SendMessageA
GetDlgItem
GetFocus
IsWindowVisible
SetWindowTextA
GetWindowRect
CreateWindowExA
GetWindowLongA
CreateWindowExW
EnableWindow
RegQueryValueExA
RegCloseKey
RegOpenKeyA
InternetSetFilePointer
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
check
copy
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ