ImportAccounts
ImportMailAndAddresses
MigrateAccountEx
MigrateOMIAccountsEx
SilentImport
Static task
static1
Behavioral task
behavioral1
Sample
0e33a6283ed2402877e5583d4cd69a18_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0e33a6283ed2402877e5583d4cd69a18_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
0e33a6283ed2402877e5583d4cd69a18_JaffaCakes118
Size
52KB
MD5
0e33a6283ed2402877e5583d4cd69a18
SHA1
b0a26c578c39fc2bb30e70f5eb45dd648aa64c0a
SHA256
e0e2e1e1de61c4323e55994a5643b464e85e243b267b43b649d13361e48f2160
SHA512
ba91bc8547ba4737b0b49b12787689ea224336551a18fceb894fb1312031ba4799e0bf051e329a00b7fba520141d758fdc27fd39335004c81427ae7c87353507
SSDEEP
768:UKBfHDAgnNK/+ua26UeM1okSuLCgkul1PcZzTc5EAtJj5mMfFNIV8vJug5np+P75:JBfHVc/+eBggt3cdSRJjjtCV8vJugGAu
Checks for missing Authenticode signature.
resource |
---|
0e33a6283ed2402877e5583d4cd69a18_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
atoi
CoFileTimeNow
GetDC
Escape
SHGetMalloc
FreeSid
ord6913
ImportAccounts
ImportMailAndAddresses
MigrateAccountEx
MigrateOMIAccountsEx
SilentImport
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE