_wsydnati_FindFirstNext@20
_wsynativez@16
Static task
static1
Behavioral task
behavioral1
Sample
1c691890a633e6872056bc618e631e56_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1c691890a633e6872056bc618e631e56_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1c691890a633e6872056bc618e631e56_JaffaCakes118
Size
72KB
MD5
1c691890a633e6872056bc618e631e56
SHA1
807490a23c4b97976fb9d5cc01e99a5a46e6f32d
SHA256
aabd81f2a311ba697513bbc1844bb0f27f74ef2ff4d329720e3d0e8639bcd671
SHA512
0d125ed63440b573e78fc2cdd6e79cb3b3761ee7381fc8057b9d955c1a82fb3c4ef49e5a03ae3d54ad0a74a963982dccf4476c2fce85ff8789bb4969888bf9b1
SSDEEP
1536:t1FFXytyZjShuFziEhFbd56gr4yzJCjyxEp0W4h:tfFXyYBX6gr4raEph4h
Checks for missing Authenticode signature.
resource |
---|
1c691890a633e6872056bc618e631e56_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
OutputDebugStringA
LoadLibraryA
FreeLibrary
DisableThreadLibraryCalls
atoi
sprintf
strncpy
free
_initterm
malloc
_adjust_fdiv
_wsydnati_FindFirstNext@20
_wsynativez@16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ