SUB0TOT
Sub0tot
TChk0DN
TChkCoFi
TChkDec
TChkDecO
TClc
TClcChk
TClcNew
TClcPens
TGetDBAG
TGetDBFS
TGetDBGS
TQte
_mFdllinfo
Static task
static1
Behavioral task
behavioral1
Sample
066495da207d606f10a7b05295038c17_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
066495da207d606f10a7b05295038c17_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
066495da207d606f10a7b05295038c17_JaffaCakes118
Size
76KB
MD5
066495da207d606f10a7b05295038c17
SHA1
0e703c38f60078f0acd448f7a1170b8cd79412f5
SHA256
5a993d4fd0d2bbb18c7ad8908563e40a7649897f78bd7acf2150bc1428d6590a
SHA512
50142e213672e4f523cec267ea3343db4eb1da184d4fa0d701d315df5fb17ac0aeb07cc70004be6f9533d758f83b728b1244080d8107b60e21c747d2b85bb25e
SSDEEP
768:7Pn74+gCxVcyp/QHwc2lEav4WDnmsfPLpRKdPdFmB:bn7q8np6T2uaAWDnrf0jm
Checks for missing Authenticode signature.
resource |
---|
066495da207d606f10a7b05295038c17_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
malloc
_initterm
free
_setjmp3
sprintf
exit
longjmp
DisableThreadLibraryCalls
FreeLibrary
GetSystemTime
GetModuleFileNameA
GetEnvironmentVariableA
InterlockedExchange
GetCommandLineA
GetModuleHandleA
GetLastError
GetProcAddress
LoadLibraryA
Sleep
MessageBoxA
CharUpperA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SUB0TOT
Sub0tot
TChk0DN
TChkCoFi
TChkDec
TChkDecO
TClc
TClcChk
TClcNew
TClcPens
TGetDBAG
TGetDBFS
TGetDBGS
TQte
_mFdllinfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ