Aqv
Edo
Fhh
Ivz
Mnr
Mxw
Niy
Pgc
Svm
Tpu
Vry
Yqj
Yuu
Static task
static1
Behavioral task
behavioral1
Sample
0c789c9e177e2012bf5adc30ca0beab9_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c789c9e177e2012bf5adc30ca0beab9_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0c789c9e177e2012bf5adc30ca0beab9_JaffaCakes118
Size
126KB
MD5
0c789c9e177e2012bf5adc30ca0beab9
SHA1
bdf4b4798ea77c18b21a3cc23f5066239adda378
SHA256
17d6ff2c708300d23ee46e1c16ba2809667eca28c60bd55cb25bc10a29659331
SHA512
6d7b34bad2a739b65f330509d172ce86a7df106cc060bc57a2de2e990cf09f8812ab5581dcd42dcb0ff124435edf03455239a49bff35d3200303f23ae8da5e6f
SSDEEP
3072:WfH83epCMJ53zwjc+eb1IK2M1u00KMMiU1m9:kHkepC+zogDL1u00KNP
Checks for missing Authenticode signature.
resource |
---|
0c789c9e177e2012bf5adc30ca0beab9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VariantClear
SysFreeString
SysAllocStringLen
LoadTypeLib
CloseServiceHandle
OpenProcessToken
OpenServiceA
QueryServiceStatus
StartServiceA
ControlService
OleFlushClipboard
OleSaveToStream
OleUninitialize
GetRunningObjectTable
ReleaseStgMedium
RevokeDragDrop
StringFromGUID2
WriteClassStm
CreateBindCtx
CoTaskMemRealloc
CoCreateInstance
CoCreateGuid
ReadClassStg
CLSIDFromString
CreateOleAdviseHolder
lstrcpynA
lstrcpyA
TlsFree
RtlUnwind
GetVersion
GetACP
FlushFileBuffers
FindResourceA
EnumResourceLanguagesW
CloseHandle
ReadFile
Aqv
Edo
Fhh
Ivz
Mnr
Mxw
Niy
Pgc
Svm
Tpu
Vry
Yqj
Yuu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ