check
copy
run
Static task
static1
Behavioral task
behavioral1
Sample
f0e20d00b2b9e471e6e4046bdffc1265_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0e20d00b2b9e471e6e4046bdffc1265_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f0e20d00b2b9e471e6e4046bdffc1265_JaffaCakes118
Size
32KB
MD5
f0e20d00b2b9e471e6e4046bdffc1265
SHA1
75c1be7cbdbc4c9072ff2d7187ccd109bb4190cf
SHA256
263df900f0f2403861d6b21e468cba269c5e544083048f6b70b45b74df649527
SHA512
fde226db9176a7c41a2efb2826e27e83a82e9ed1740f6c011c6ce3ce99c028cffc559d88f4232e54458ed5ef5e399ca8c8b0ffb58aeb8fbbf9be93c6de1307bd
SSDEEP
384:pk9jUjDJwvOc7pTBc14aWPtBSWX0NKOKv295YIcO6l+yy9IM:jkf7plc14apXTKvy5YIcO+Jy9
Checks for missing Authenticode signature.
resource |
---|
f0e20d00b2b9e471e6e4046bdffc1265_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapFree
HeapReAlloc
GetFileAttributesA
GetTempPathA
MultiByteToWideChar
GetTickCount
CloseHandle
WriteFile
ReadFile
CreateFileA
lstrcatA
lstrcmpA
SystemTimeToFileTime
GetSystemTime
HeapAlloc
CreateEventA
GetModuleHandleA
PulseEvent
GetProcessHeap
GetProcAddress
FreeLibrary
LoadLibraryA
GetLastError
GlobalFree
GlobalAlloc
lstrcpynA
lstrcpyA
SetFilePointer
RegisterWindowMessageA
SetWindowLongA
SetDlgItemTextA
MessageBoxA
SetWindowTextA
IsChild
EndPaint
BeginPaint
AnyPopup
ShowWindow
SendMessageA
GetDlgItem
GetFocus
GetClientRect
GetWindowRect
CreateWindowExA
GetWindowLongA
CreateWindowExW
EnableWindow
DestroyWindow
CallWindowProcA
wsprintfA
IsWindowVisible
RegQueryValueExA
RegOpenKeyA
RegCloseKey
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetSetFilePointer
check
copy
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ