GqELznZx
YtFsjajfM
dEcSPwIVZYl
eFbUJjDBruQ
gqbssQN
Static task
static1
Behavioral task
behavioral1
Sample
255ea0e5436f1c0a0fecf3bb5474e62d_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
255ea0e5436f1c0a0fecf3bb5474e62d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
255ea0e5436f1c0a0fecf3bb5474e62d_JaffaCakes118
Size
70KB
MD5
255ea0e5436f1c0a0fecf3bb5474e62d
SHA1
c754f6f8d6180311a2472c74a0b1091b29802c42
SHA256
3aa677ec6513ed42cdcee10f27cfe7b5a056e9a892ca39811371498d7b153adb
SHA512
1fa8ecccbe8a0660de1e283bf2748cfae2f17e3f002fe668c68cbf5ca05288ac6ece50a9720d0559a69e67e0e5f02f7b9e7ccc786a4d6601be58bf1dc2a184ac
SSDEEP
1536:juolzvwn5H4QNlgR1Q22kv4Augn3amPLFO25MIhFG:dlTO5H4Qosiv48n3aWR1
Checks for missing Authenticode signature.
resource |
---|
255ea0e5436f1c0a0fecf3bb5474e62d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
malloc
free
_XcptFilter
_initterm
_amsg_exit
_except_handler3
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
InterlockedCompareExchange
InterlockedExchange
RtlUnwind
SystemTimeToFileTime
SetEvent
GetVolumeInformationA
GetLocaleInfoA
GetTickCount
ReleaseMutex
MoveFileExA
GetWindowsDirectoryA
WritePrivateProfileStringA
MoveFileA
GetSystemTime
GetSystemDirectoryA
lstrcmpiA
lstrcmpA
GetVersionExA
CreateEventA
VirtualFree
ResumeThread
TerminateProcess
GlobalFree
GetThreadContext
VirtualQueryEx
LoadLibraryA
FreeLibrary
GlobalAlloc
VirtualAlloc
DeleteFileA
GetTempPathA
GetLastError
CreateMutexA
WaitForSingleObject
GetProcAddress
GetModuleHandleA
ExitProcess
GetVersion
CreateProcessA
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrcpynA
lstrlenA
lstrcpyA
FindAtomA
GetProcessHeap
HeapFree
ReadFile
HeapAlloc
GetFileSize
Sleep
OpenProcess
GetCurrentThreadId
GetTempFileNameA
wsprintfA
GetWindowTextA
FindWindowExA
MessageBoxA
OpenInputDesktop
GetThreadDesktop
SetThreadDesktop
FindWindowA
GetWindowThreadProcessId
CloseDesktop
EqualRect
ClientToScreen
IsWindowVisible
InflateRect
GetCursorPos
GetFocus
GetWindowRect
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
RegDeleteKeyA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
CreateProcessAsUserA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
SHDeleteValueA
SHGetValueA
SHSetValueA
SHDeleteKeyA
GetBkMode
GetBkColor
GqELznZx
YtFsjajfM
dEcSPwIVZYl
eFbUJjDBruQ
gqbssQN
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ