erc
fdsew
nmnmwrew
Static task
static1
Behavioral task
behavioral1
Sample
07786b9e589867b806baaa8d1cfbad35_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07786b9e589867b806baaa8d1cfbad35_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
07786b9e589867b806baaa8d1cfbad35_JaffaCakes118
Size
40KB
MD5
07786b9e589867b806baaa8d1cfbad35
SHA1
fec1d5520d0adea152cf49554f1c2444a77719f8
SHA256
f5913000a2825ed09c11bf440ba045d2ce126d1788267922196b0068043713f3
SHA512
dd552c064e757bc30274b1a705577ac1ad1b047f7c1be4cc17a96b45a0816b46a84df9b637923b0444dc35f878d23bbe843e30ebf7fe9df58a04e8be3ebc8714
SSDEEP
768:NES36P7MvZk8GSG54jDszVk+U1H6jsSRif5RrN:NEa6P7MvZFHsaNXvrN
Checks for missing Authenticode signature.
resource |
---|
07786b9e589867b806baaa8d1cfbad35_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
CreateMutexA
GetCurrentProcessId
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
WriteFile
DeleteFileA
InitializeCriticalSection
VirtualProtectEx
VirtualProtect
GetPrivateProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
ReadProcessMemory
SetUnhandledExceptionFilter
SetThreadContext
ExitProcess
MultiByteToWideChar
TerminateProcess
CreateProcessA
VirtualAlloc
VirtualFreeEx
lstrlenA
VirtualAllocEx
GetCurrentProcess
GetCurrentThreadId
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCommandLineA
IsBadReadPtr
TerminateThread
CreateThread
GetModuleHandleA
LoadLibraryA
OpenThread
GetProcAddress
IsWindowVisible
FindWindowExA
GetWindowThreadProcessId
CallNextHookEx
GetWindowTextA
SendMessageA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
strncpy
strchr
__CxxFrameHandler
_strupr
_stricmp
_strlwr
_strcmpi
??3@YAXPAX@Z
??2@YAPAXI@Z
memcpy
strrchr
memset
sprintf
strcat
strcpy
strcmp
wcslen
strlen
strstr
erc
fdsew
nmnmwrew
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ