check
copy
run
Static task
static1
Behavioral task
behavioral1
Sample
f30c90ee1a7f62d9f9af4c815b610529_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f30c90ee1a7f62d9f9af4c815b610529_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f30c90ee1a7f62d9f9af4c815b610529_JaffaCakes118
Size
20KB
MD5
f30c90ee1a7f62d9f9af4c815b610529
SHA1
15658ba7b195c712ea612c2f6c2b44b0ecd9334f
SHA256
853854828daacf51bc9189099dee1a48c187e233d0975311fe1c8e99ca0306ea
SHA512
a384dd39bd11cc2e128afcfc81453a6f2b69b147c3a1fdb5e74b8840f12af111323d68b31929a8e867e2c5ddc62284713f17080b32d5d1a4ad1f2b2d972357c1
SSDEEP
384:omqW+c4ti/Esoco2KFXpcfy3hzMqkc2+hSa6+avj13:RqW/4hsoc0Ofy3hLkc2+kVNL
Checks for missing Authenticode signature.
resource |
---|
f30c90ee1a7f62d9f9af4c815b610529_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapFree
HeapReAlloc
GetFileAttributesA
GetTempPathA
MultiByteToWideChar
GetTickCount
WriteFile
ReadFile
CreateFileA
lstrcatA
lstrcmpA
SystemTimeToFileTime
GetLocalTime
SetFilePointer
CreateEventA
HeapAlloc
InterlockedExchange
RtlUnwind
GetModuleHandleA
GetProcAddress
CloseHandle
PulseEvent
GetProcessHeap
GlobalAlloc
LoadLibraryA
VirtualQuery
GetLastError
lstrcpynA
lstrcpyA
GlobalFree
GetParent
AnyPopup
ShowWindow
wsprintfA
CallWindowProcA
DestroyWindow
RegisterWindowMessageA
SetWindowLongA
SetDlgItemTextA
MessageBoxA
SetWindowTextA
GetDlgItem
GetFocus
IsWindowVisible
GetClientRect
GetWindowRect
CreateWindowExA
GetWindowLongA
CreateWindowExW
EnableWindow
SendMessageA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetSetFilePointer
check
copy
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ