fa
fc
Static task
static1
Behavioral task
behavioral1
Sample
0f1d6af30955373a856c618828ffba12_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0f1d6af30955373a856c618828ffba12_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0f1d6af30955373a856c618828ffba12_JaffaCakes118
Size
11KB
MD5
0f1d6af30955373a856c618828ffba12
SHA1
89be791280b93167ab6069de649771d0f03f157e
SHA256
1d49b1ee107158f0921665e90d36cc4ce2e58e57af8b16ff772011f534050fcf
SHA512
d3174d6ea9370ed47c6ba4de9313f7339838291ed9fa4a1264c0186bd762a60ab483a2534a18254fafa69a4431661fcf68a0c303ecf62768d45935baca5a7afd
SSDEEP
192:RZB8t2+sA8v5UAzK2Ywl/ApfKGK2G320Vn7:H+s5A8v5UAzKUlo1K2G32q
Checks for missing Authenticode signature.
resource |
---|
0f1d6af30955373a856c618828ffba12_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CallNextHookEx
SetWindowsHookExA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
_adjust_fdiv
malloc
_stricmp
_initterm
free
strcat
strrchr
??3@YAXPAX@Z
strcpy
??2@YAPAXI@Z
sprintf
strlen
strncpy
strchr
strstr
fclose
fread
fopen
memset
memcpy
strcmp
MultiByteToWideChar
Sleep
VirtualProtectEx
GlobalFree
ReadProcessMemory
WideCharToMultiByte
GlobalAlloc
IsBadReadPtr
GetPrivateProfileStringA
GetProcAddress
GetModuleHandleA
CreateThread
GetModuleFileNameA
GlobalLock
GetCurrentProcess
fa
fc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ