SendPostDate
SendUnistallDate
Static task
static1
Behavioral task
behavioral1
Sample
0e4ba3f4cced29663dd83692c8754472_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0e4ba3f4cced29663dd83692c8754472_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0e4ba3f4cced29663dd83692c8754472_JaffaCakes118
Size
28KB
MD5
0e4ba3f4cced29663dd83692c8754472
SHA1
fb108b9440013ca0487906cf2cc4275f9fb7efcc
SHA256
5ac39685332aef454f25719ba3e3d5e4d2fb31ad2fa6e5a753089831f133fcbc
SHA512
49fbb714e27921c314906af91ce819acfeeda2d5e74f65e8bfca4d2d13b00a30d35ce94bfb87580309180bc354e65dcc4e79094adf356d9654ed86dd94a3eb7f
SSDEEP
384:OA42VFnTRCUX8KgOP/ImlHoybL3goIo99xJ:7JFnT4UsKg6/sC3JIo99x
Checks for missing Authenticode signature.
resource |
---|
0e4ba3f4cced29663dd83692c8754472_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
GetEnvironmentStrings
RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
SendPostDate
SendUnistallDate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ