fa
fc
Static task
static1
Behavioral task
behavioral1
Sample
f2d5dc82ad36e11d501a874fba8569ee_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f2d5dc82ad36e11d501a874fba8569ee_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f2d5dc82ad36e11d501a874fba8569ee_JaffaCakes118
Size
7KB
MD5
f2d5dc82ad36e11d501a874fba8569ee
SHA1
8cec6ff68873a80ef8a6f072342f6eca5effca9f
SHA256
b82a2dbb8bc6359c6594b29a899ec3a23f3c9a5c605c91a5cb28747b75f60c20
SHA512
4c3858b84cc4ede3f88d322e80f72795d731ff2c9e7230a2aab32513584efb5a6d1d5a8ab0928edc77a0c64aa35bd272852842a0ee5cd1255e4e51a69d5404df
SSDEEP
96:jOWtBb9DzeUkE5Go6ccayCbFlsKuiQ7nP2NfR3qaf9ioOJuWp:jOWtp9DwEc8pHL1uiYnKfj8ocu
Checks for missing Authenticode signature.
resource |
---|
f2d5dc82ad36e11d501a874fba8569ee_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IsBadReadPtr
CreateThread
VirtualProtectEx
GetModuleFileNameA
GetCurrentProcess
GetProcAddress
GetModuleHandleA
Sleep
GetCommandLineA
GlobalFree
ReadProcessMemory
GlobalLock
GlobalAlloc
ToAscii
SetWindowsHookExA
CallNextHookEx
GetAsyncKeyState
GetKeyboardState
UnhookWindowsHookEx
InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle
_adjust_fdiv
malloc
_initterm
free
strstr
_stricmp
strncpy
??2@YAPAXI@Z
sprintf
strlen
memcpy
strrchr
strcpy
strcmp
strcat
fa
fc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ