C_GetFunctionList
W32N_GetTimestampInformation
Static task
static1
Behavioral task
behavioral1
Sample
20c572f49847d4533ef3d2d4ee47640a_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
20c572f49847d4533ef3d2d4ee47640a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
20c572f49847d4533ef3d2d4ee47640a_JaffaCakes118
Size
159KB
MD5
20c572f49847d4533ef3d2d4ee47640a
SHA1
90e5468d00d09c8d8ba1a79a679af04c01eb15a2
SHA256
2fd97db177f2a81fc00502788165267af36f2606121e69d5f28eb04f9e6a89cd
SHA512
4d9689e078613e899b72f05edc7d3c8c82e7d7f4906d29508c4080e48031af9c233eb576638042d68a2923427693b546eb393434a6b698bd7297c0a5a9bf6124
SSDEEP
3072:pgAupNvZJ17oBSfUzWJM169h+56a1qIZMzdKUnBvGjmkwbU1hZy8cMbjTtcpnA14:yA4gSszAx/D2odKQADhlTti
Checks for missing Authenticode signature.
resource |
---|
20c572f49847d4533ef3d2d4ee47640a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
FindResourceA
GetACP
GetCPInfo
GetCommandLineA
GetModuleHandleA
GetNumberFormatA
GetOEMCP
GetStartupInfoA
HeapAlloc
HeapCreate
HeapSize
InterlockedDecrement
LoadResource
LockResource
MultiByteToWideChar
RtlUnwind
SetEvent
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
WaitForMultipleObjects
realloc
vswprintf
wcscmp
wcslen
time
GetUserObjectSecurity
InvalidateRgn
DestroyWindow
wsprintfA
IsDlgButtonChecked
KillTimer
LoadImageA
MoveWindow
EnumChildWindows
EndDialog
RevokeActiveObject
OleTranslateColor
OleLoadPicturePath
ClearCustData
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroy
VarBstrCat
VarBstrCmp
SafeArrayAccessData
ChrCmpIA
PathCombineA
PathGetDriveNumberA
SHDeleteEmptyKeyA
SHDeleteValueA
SHEnumKeyExA
SHQueryInfoKeyA
StrRStrIA
StrSpnA
StrStrA
C_GetFunctionList
W32N_GetTimestampInformation
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ