Woycd
Wspkughcocw
Static task
static1
Behavioral task
behavioral1
Sample
28b854748352a8c8ceac617bb2584983_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28b854748352a8c8ceac617bb2584983_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
28b854748352a8c8ceac617bb2584983_JaffaCakes118
Size
34KB
MD5
28b854748352a8c8ceac617bb2584983
SHA1
77a4f630fbc3db06308d251d59e65d2d26d84b3b
SHA256
616a382defa5c2f7d444e8e3a7071c5fd3052b58994ab12e10d7158f0edd9882
SHA512
ccb8b85979ad84ea76a42b247890bd83f8682961dfc55bf88c9fba8c0f071e0d6165ff57928d8a042db49da82ce82ea7c9645e828b149e61dd52d5eacbcee043
SSDEEP
768:mwGayxUjJ+oo1pVNJR9S8aAYu40iNMzpu+4+zEui:9GayUjoooBPS8apb+Vz
Checks for missing Authenticode signature.
resource |
---|
28b854748352a8c8ceac617bb2584983_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
EnterCriticalSection
ExitProcess
ExitThread
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
LeaveCriticalSection
OpenFileMappingA
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TlsGetValue
VirtualAlloc
lstrcatA
lstrcmpA
EndPaint
CloseWindow
CharUpperBuffA
EqualRect
LsaGetRemoteUserName
LsaICLookupSids
LsaLookupNames
RegEnumKeyA
RegOpenKeyExA
LsaEnumeratePrivilegesOfAccount
LsaEnumeratePrivileges
LsaEnumerateAccountRights
LsaDeleteTrustedDomain
__vbaDateStr
__vbaEraseKeepData
__vbaCyUI1
__vbaCyFix
__vbaCyErrVar
__vbaCopyBytesZero
__vbaAryVarVarg
__vbaAryConstruct2
DirectInputCreateA
DirectInputCreateW
DirectInputCreateEx
Woycd
Wspkughcocw
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ