abcd
efgh
ijkl
Static task
static1
Behavioral task
behavioral1
Sample
14bdc45c8a797a9c296cefbe7fc0b2c6_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
14bdc45c8a797a9c296cefbe7fc0b2c6_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
14bdc45c8a797a9c296cefbe7fc0b2c6_JaffaCakes118
Size
39KB
MD5
14bdc45c8a797a9c296cefbe7fc0b2c6
SHA1
d2c9ed53a12391c85a88ca6692e6e95b7e89d076
SHA256
3c62398d96b90504012d6429ed0bb6af9bc6da165179657f98564481982cd993
SHA512
ecff25c87e0232a3a15f0bf4aa05d3c1214750e0feb09fdf3786533e0f7db820ca018a918ae64f0aa784eae9316b6cb5f51b3343171389b1b9fd5b534de3a650
SSDEEP
768:XdchRadN++DIq2JtiPKQvDtt42VQ2Kx0mXhao:XdciHItmPKUxVQ2KVx
Checks for missing Authenticode signature.
resource |
---|
14bdc45c8a797a9c296cefbe7fc0b2c6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualQueryEx
GetCommandLineA
GlobalAlloc
WideCharToMultiByte
VirtualFreeEx
CreateEventA
GetFileAttributesW
lstrcatA
MultiByteToWideChar
ReleaseSemaphore
GetTempPathW
GetProcAddress
GlobalFree
LoadLibraryA
GetModuleHandleA
lstrcatW
CloseHandle
GetCurrentProcessId
UnregisterWaitEx
lstrcpynA
lstrcpyW
DeleteFileA
lstrcpyA
ReadFile
WriteFile
RtlUnwind
CompareStringA
CreateToolhelp32Snapshot
Process32First
SetFilePointer
lstrcmpA
ResumeThread
CreateFileA
DestroyWindow
GetWindowRect
GetFocus
GetGuiResources
wsprintfA
GetClientRect
SendMessageA
RegisterWindowMessageA
wsprintfW
SetWindowLongA
GetWindowLongA
CreateWindowExA
GetDlgItem
ShowWindow
CreateWindowExW
IsWindowVisible
SetWindowTextA
EnableWindow
CallWindowProcA
SetDlgItemTextA
MessageBoxA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
abcd
efgh
ijkl
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ