ccc
ddd
Static task
static1
Behavioral task
behavioral1
Sample
2446e52647418dedfe045f6ee3ecdf57_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2446e52647418dedfe045f6ee3ecdf57_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2446e52647418dedfe045f6ee3ecdf57_JaffaCakes118
Size
28KB
MD5
2446e52647418dedfe045f6ee3ecdf57
SHA1
e73ae918f3b632053752eb0cf0dd0904a677d270
SHA256
ff8f3d04534f8ed3b12187f7cc916adecd37f2d9f031011ebe58cfc8d29be772
SHA512
dbb62071e4f936f26adfe8eaebd6f3e7d3f16fb7956f74752dae64d375e199ea5c367a1552689daf02e36cfec18849575b47281d68b673ec48ace045aab75a5e
SSDEEP
384:m9OCM1jxtpDrERkMLDs1SLGDLIM2knlozb4/gPIVHbKj++9mqG6a6jb91oLB:mUC6D43LuSS3ZLnUygPIRbkmD65s
Checks for missing Authenticode signature.
resource |
---|
2446e52647418dedfe045f6ee3ecdf57_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentProcessId
CloseHandle
CreateRemoteThread
VirtualAllocEx
OpenProcess
GetModuleHandleA
lstrlenA
GetCurrentProcess
ResumeThread
TerminateProcess
GetModuleFileNameA
VirtualProtectEx
WriteProcessMemory
GetPrivateProfileStringA
ReadProcessMemory
SetUnhandledExceptionFilter
SetThreadContext
OpenThread
ReadFile
CreateFileA
WideCharToMultiByte
CreateMutexA
CreateProcessA
VirtualAlloc
ExitProcess
GetSystemDirectoryA
GetCurrentThreadId
GetTickCount
RaiseException
SetFilePointer
WriteFile
DeleteFileA
InitializeCriticalSection
VirtualProtect
LeaveCriticalSection
EnterCriticalSection
Process32First
CreateToolhelp32Snapshot
GetLastError
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCommandLineA
IsBadReadPtr
TerminateThread
CreateThread
LoadLibraryA
MultiByteToWideChar
GetProcAddress
CallNextHookEx
GetWindowThreadProcessId
GetWindowTextA
FindWindowA
_stricmp
_strlwr
_strcmpi
_ltoa
_strupr
wcslen
srand
??2@YAPAXI@Z
memcpy
strrchr
memset
sprintf
strcat
strcpy
strlen
??3@YAXPAX@Z
strncpy
strchr
strstr
strcmp
__CxxFrameHandler
rand
ccc
ddd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ