fa
fb
Static task
static1
Behavioral task
behavioral1
Sample
0e6b12d2cc14989117d06fe8d8ab8c17_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0e6b12d2cc14989117d06fe8d8ab8c17_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0e6b12d2cc14989117d06fe8d8ab8c17_JaffaCakes118
Size
7KB
MD5
0e6b12d2cc14989117d06fe8d8ab8c17
SHA1
8261284a0c8fdf48c468fb95e099ed165588b8df
SHA256
716b8710dfba7383751b788790eac74976421b7a0b70829704fef6087735e146
SHA512
3df9fa98acd368ce30844f3c1c914f1a81efeeda678fb700c7dc22e1857e4aaa957afb6728e2d263c7dec8bc96e7d156f3be3359f3967e73ef09a457d4cfba14
SSDEEP
96:AD8JWPrXo0MrLckhuwU8McG9Lpx2402XCgFH9WgyyhafHgdHjAEPlB:AXzozBIw1GZ72hAzVyyUHgGuf
Checks for missing Authenticode signature.
resource |
---|
0e6b12d2cc14989117d06fe8d8ab8c17_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
CreateThread
GetCurrentProcessId
GetCurrentProcess
Thread32Next
TerminateThread
GetThreadPriority
CloseHandle
GlobalLock
GetModuleHandleA
Thread32First
CreateToolhelp32Snapshot
GetPrivateProfileStringA
Sleep
VirtualProtectEx
WideCharToMultiByte
ExitProcess
ReadProcessMemory
GlobalFree
GetProcAddress
GetModuleFileNameA
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx
_stricmp
strrchr
memset
memcpy
strcpy
strlen
sprintf
free
_initterm
malloc
_adjust_fdiv
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile
fa
fb
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ