aab
aal
allert2
fgllert
psxal
qoad
windows
Static task
static1
Behavioral task
behavioral1
Sample
f167d36946b7e0cc6ef8eff111a3285f_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f167d36946b7e0cc6ef8eff111a3285f_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f167d36946b7e0cc6ef8eff111a3285f_JaffaCakes118
Size
15KB
MD5
f167d36946b7e0cc6ef8eff111a3285f
SHA1
cf7ceff036aba26bca1eb1a66e38380150c66fd2
SHA256
6d39b76954213ca456e32df388f95f93ba3cd210349423b69ef5b78a9e98cc39
SHA512
516b8f3b4b730cdbd3b2328881191820d985d6b17cc33053b00b2e33cdfb76587fea26daa4d867d91c7ced6b5950cdd207589aed6c0db484c2c521635e24956d
SSDEEP
384:ohab2OQFxOizzmqdKBxsrO5cyoadVGeug5VuqbbJ+ujzlm+M7i:+Oe/dEBrcadVtugvvXYEX
Checks for missing Authenticode signature.
resource |
---|
f167d36946b7e0cc6ef8eff111a3285f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadIconA
PostQuitMessage
RegisterClassExA
SetWindowPos
SetWindowTextA
TranslateAcceleratorA
TranslateMessage
LoadCursorA
SetTimer
LoadAcceleratorsA
KillTimer
GetMessageA
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
wsprintfA
lstrcpynA
WritePrivateProfileStructA
WaitForSingleObject
TerminateProcess
RtlZeroMemory
MoveFileExA
LoadLibraryA
GetVersionExA
GetTempPathA
GetTempFileNameA
ClearCommError
CloseHandle
CopyFileExA
CopyFileExW
CreateThread
DefineDosDeviceA
DeleteFileA
ExitProcess
GetLastError
GetLongPathNameA
GetModuleFileNameA
GetModuleFileNameW
GetProcAddress
fseek
time
strlen
strcpy
strcmp
strcat
memset
fwrite
fscanf
fread
_itoa
_strlwr
_wfopen
atoi
fclose
fopen
PathFileExistsA
StrStrA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey
aab
aal
allert2
fgllert
psxal
qoad
windows
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ