cleanup
init
Static task
static1
Behavioral task
behavioral1
Sample
03b7fa17ebe40dff2077fa7d9ddef6e1_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
03b7fa17ebe40dff2077fa7d9ddef6e1_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
03b7fa17ebe40dff2077fa7d9ddef6e1_JaffaCakes118
Size
96KB
MD5
03b7fa17ebe40dff2077fa7d9ddef6e1
SHA1
6e43d3dae70edb0ff2143229e92c3b2f42d252c0
SHA256
7e9f19e463c9452c4d55e95bc79a46a845dacfdb463ac15748d4177c4cae6325
SHA512
5ec31d91cc8287475cb620e1468d972b5253730566dd019173b45a8fef711a45a83f407f0cf6aa9ba8087048ec2ff5af24dd578d9742ebcb110a59834527688b
SSDEEP
1536:E/IO7fq8OJTMnwgH+f/AmQriKeG+TnFZXtGoK8tjcoQdV8xibKrvIbZUv0z/4:Ex7rm/AmQr7+hdtTKUjYi2cgbZs
Checks for missing Authenticode signature.
resource |
---|
03b7fa17ebe40dff2077fa7d9ddef6e1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
HeapAlloc
GetProcessHeap
HeapFree
GetModuleHandleA
GetVolumeInformationA
GetSystemDirectoryA
GetEnvironmentVariableA
VirtualFree
GetProcAddress
GetCurrentProcessId
PostMessageA
RegQueryValueExA
cleanup
init
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ