cadcd
rewrew
yiuppwp
Static task
static1
Behavioral task
behavioral1
Sample
1a02d2779873c985dacbe23aa7ee00ff_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a02d2779873c985dacbe23aa7ee00ff_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1a02d2779873c985dacbe23aa7ee00ff_JaffaCakes118
Size
36KB
MD5
1a02d2779873c985dacbe23aa7ee00ff
SHA1
e7b702adefd9056efa6685c86dbe674bf86aa4af
SHA256
fbd9f2a1df30b9535d8dc0f3d38b664ba21a8ad764a47ab8388b9a8c7ddb5149
SHA512
a0c2b931da4c54b4e52d90051293e4f15be01ce772a02bc3ce146accb2deef2d8c1bfb0f3daef29e7e3533d38f88ea6cad8ebac81681fc31b10fa8e21fa816cb
SSDEEP
384:FC3w0TqK9l51u74OD9h71TTXfw1y7lojnnj5JfNkMr5YBfIt:wAZK9l59OD9dRfj7lojXuI5AQt
Checks for missing Authenticode signature.
resource |
---|
1a02d2779873c985dacbe23aa7ee00ff_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
ExitProcess
WriteFile
VirtualProtectEx
GetPrivateProfileStringA
WideCharToMultiByte
GetTempPathA
VirtualAlloc
ReadProcessMemory
GetCurrentProcessId
SetThreadContext
OpenThread
MultiByteToWideChar
TerminateProcess
CreateProcessA
GetCurrentThreadId
GetCurrentProcess
CreateMutexA
GetLastError
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCommandLineA
IsBadReadPtr
TerminateThread
CreateThread
GetModuleHandleA
LoadLibraryA
SetUnhandledExceptionFilter
GetProcAddress
CallNextHookEx
GetWindowThreadProcessId
GetWindowTextA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
_strcmpi
_stricmp
_strlwr
??2@YAPAXI@Z
memcpy
strrchr
memset
sprintf
strcat
strcpy
strcmp
strlen
strstr
??3@YAXPAX@Z
strncpy
strchr
__CxxFrameHandler
cadcd
rewrew
yiuppwp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ