cadcd
rewrew
Static task
static1
Behavioral task
behavioral1
Sample
253067583f472d7756184aad8a1b01bf_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
253067583f472d7756184aad8a1b01bf_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
253067583f472d7756184aad8a1b01bf_JaffaCakes118
Size
36KB
MD5
253067583f472d7756184aad8a1b01bf
SHA1
1f11e001a311b1d2bb1ec01be0e0d1c0c7c5f354
SHA256
c4ed73e1a10dbac5431fa060dba5b21ed8dc7d46a3b2516535dac7402927e3b0
SHA512
ce153211209d175b3615a47925ac8d24c5702c8288f9656d8530d4ebe9c7356dbac59473d73224f6bdd47e49297704e2b8b29d63818277b96a65fc87e3c7416b
SSDEEP
384:trj7uCbmtVnNVbe4vD/2DThLGrWjwl39goGLOAfwVtj4xNkMBAIENRhR:dj7bm3nNVb7vDW9vwlKoGLOuxuyKP
Checks for missing Authenticode signature.
resource |
---|
253067583f472d7756184aad8a1b01bf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
ExitProcess
WriteFile
VirtualProtectEx
GetPrivateProfileStringA
WideCharToMultiByte
GetTempPathA
VirtualAlloc
ReadProcessMemory
GetCurrentProcessId
SetThreadContext
OpenThread
MultiByteToWideChar
GetCurrentThreadId
GetCurrentProcess
CreateMutexA
GetLastError
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCommandLineA
IsBadReadPtr
TerminateThread
CreateThread
GetModuleHandleA
LoadLibraryA
SetUnhandledExceptionFilter
GetProcAddress
CallNextHookEx
GetWindowTextA
GetWindowThreadProcessId
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
_stricmp
_strcmpi
_strlwr
??2@YAPAXI@Z
memcpy
strrchr
memset
sprintf
strcat
strcpy
strcmp
strlen
strstr
??3@YAXPAX@Z
strncpy
strchr
__CxxFrameHandler
cadcd
rewrew
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ