cleanup
init
Static task
static1
Behavioral task
behavioral1
Sample
f59659323e59656e866b16e2ed3882f4_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f59659323e59656e866b16e2ed3882f4_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f59659323e59656e866b16e2ed3882f4_JaffaCakes118
Size
96KB
MD5
f59659323e59656e866b16e2ed3882f4
SHA1
dcb7f0920c8dbe59e25311fa45f0fca3c1341603
SHA256
ced9b3a4ea579499f7ab982edb4a6f5026796ae644b3373b3e04d7294dd238c4
SHA512
6293f1399fe38bba22e4a8e39c0293d496793b114d242f62646e0e25a7c3825b45d51ed6cc0140c9846d69614dd63f29eb4cc4d1afd938dafa008cc890ae955a
SSDEEP
1536:E/IO7fq8OJTMnwgH+f/AmQriKeG+TnFZXtGoK8tjcoQdV8xibKrvIbZUv0z/4i:Ex7rm/AmQr7+hdtTKUjYi2cgbZsi
Checks for missing Authenticode signature.
resource |
---|
f59659323e59656e866b16e2ed3882f4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
HeapAlloc
GetProcessHeap
HeapFree
GetModuleHandleA
GetVolumeInformationA
GetSystemDirectoryA
GetEnvironmentVariableA
VirtualFree
GetProcAddress
GetCurrentProcessId
PostMessageA
RegQueryValueExA
cleanup
init
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ