ManagerShortCut
aux_EnableSearchBar
Static task
static1
Behavioral task
behavioral1
Sample
104819b21051925a37b92e3a0c7a9431_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
104819b21051925a37b92e3a0c7a9431_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
104819b21051925a37b92e3a0c7a9431_JaffaCakes118
Size
48KB
MD5
104819b21051925a37b92e3a0c7a9431
SHA1
70664ed181c0bbdd5def5c1e27b59370ff5d613e
SHA256
d4f647f46b3541ea74b2e1ad9cd57b2ff0f6e6ca61e9cf45d240e9d774b4d977
SHA512
7f9692d40ffc7f6f14668321d4632bac780a7468c5765f2c21a05a1ffbe2a0684e7eed7afa77b27661080e6c38240fe9991a67d31d383a439182fa80c825aae8
SSDEEP
768:1nFaNwUSpzswvxybz1o9QXeJzZzLzVVtG4:1nFkBezswveZouqzZzLzVVtG4
Checks for missing Authenticode signature.
resource |
---|
104819b21051925a37b92e3a0c7a9431_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
MultiByteToWideChar
GetSystemDirectoryA
GetShortPathNameA
GetSystemDefaultLangID
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
RtlUnwind
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
SHGetSpecialFolderPathA
CoCreateInstance
CoInitialize
ManagerShortCut
aux_EnableSearchBar
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ