hhh
iii
Static task
static1
Behavioral task
behavioral1
Sample
01c5a083baf0fbe40f4fdec6396efcda_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
01c5a083baf0fbe40f4fdec6396efcda_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
01c5a083baf0fbe40f4fdec6396efcda_JaffaCakes118
Size
28KB
MD5
01c5a083baf0fbe40f4fdec6396efcda
SHA1
a1ed6373123baf4a758bf464c66675e192679039
SHA256
120771980d630a7eb81d38fffd38b8a331dc9ae2f9f7d43d78dc9a8492ed047e
SHA512
b39a1542cbd1be521febdbf0c163a62afd8d092d905daa67a2b3896f4af0fe45c9731693e85248ef1efb065095bab50075f394a4180f6693513b0a42a8fc7602
SSDEEP
384:xejGe5AE2FOD3EGL/YaK+NzLpw1+vFGjQfIhHi/FN7ZZzQHst6W0bS2qLEu:xWG21DUGL/oCCuG2/FR3bZ8SHLEu
Checks for missing Authenticode signature.
resource |
---|
01c5a083baf0fbe40f4fdec6396efcda_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
GetLastError
CreateMutexA
GetCurrentProcessId
GetPrivateProfileStringA
GetModuleHandleA
ReadProcessMemory
SetUnhandledExceptionFilter
SetThreadContext
OpenThread
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
TerminateProcess
CreateProcessA
VirtualAlloc
LoadLibraryA
ExitProcess
GetSystemDirectoryA
CreateFileA
GetCurrentProcess
WriteFile
DeleteFileA
InitializeCriticalSection
VirtualProtectEx
VirtualProtect
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
ReadFile
CloseHandle
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCommandLineA
IsBadReadPtr
TerminateThread
CreateThread
GetCurrentThreadId
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetWindowThreadProcessId
GetWindowTextA
GetForegroundWindow
FindWindowA
wcslen
_stricmp
_strlwr
_strupr
_strcmpi
_strnicmp
strcmp
sprintf
??2@YAPAXI@Z
memcpy
strrchr
memset
strcat
strcpy
strlen
atoi
??3@YAXPAX@Z
strncpy
strchr
strstr
fclose
fread
fopen
hhh
iii
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ