check
copy
run
Static task
static1
Behavioral task
behavioral1
Sample
2356dd0cc6c6d122ae65877405c97cfd_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2356dd0cc6c6d122ae65877405c97cfd_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2356dd0cc6c6d122ae65877405c97cfd_JaffaCakes118
Size
22KB
MD5
2356dd0cc6c6d122ae65877405c97cfd
SHA1
49a2a178982b2b717f9a8fa75831aa4f49d426d4
SHA256
2ed7700a3820e67f6ca544a0a39aca4892521806a81f38f988dc02e39562907e
SHA512
ee9b63a3d89fd62bc96a6f4ea38e0dbcd29149a9a4a02e6ca929c8ccea77f4967a44354d1109f1d1e099d29c2427817927b225fcd81112868cb4f91e5d429320
SSDEEP
384:s2fq/uCjnLsQtWKIfVQKPKjEYVkkd6asSLGcJa2KzMJm3avk8W:s2fMoQtWKIfnKTNGcJ9KzImqT
Checks for missing Authenticode signature.
resource |
---|
2356dd0cc6c6d122ae65877405c97cfd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcessHeap
WriteFile
GlobalAlloc
CreateEventA
GetFileAttributesA
ReadFile
lstrcatA
MultiByteToWideChar
GetProcAddress
GlobalFree
ResetEvent
GetLocalTime
GetModuleHandleA
CloseHandle
GetTempPathA
GetTickCount
InterlockedExchange
RtlUnwind
HeapFree
SystemTimeToFileTime
HeapAlloc
FreeLibrary
lstrcpynA
SetFilePointer
LoadLibraryA
VirtualQuery
GetLastError
lstrcmpA
CreateFileA
lstrcpyA
HeapReAlloc
SetDlgItemTextA
CallWindowProcA
EnableWindow
SetWindowTextA
IsWindowVisible
CreateWindowExW
DestroyWindow
GetWindowRect
GetFocus
wsprintfA
GetClientRect
RegisterWindowMessageA
GetForegroundWindow
SetWindowLongA
MessageBoxA
GetWindowLongA
CreateWindowExA
GetDlgItem
GetDesktopWindow
ShowWindow
SendMessageA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
InternetOpenA
InternetSetFilePointer
HttpOpenRequestA
InternetConnectA
InternetCloseHandle
check
copy
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ