one
three
two
Static task
static1
Behavioral task
behavioral1
Sample
29a0045fedc3b504e9d41cdc286a5d61_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29a0045fedc3b504e9d41cdc286a5d61_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29a0045fedc3b504e9d41cdc286a5d61_JaffaCakes118
Size
21KB
MD5
29a0045fedc3b504e9d41cdc286a5d61
SHA1
639c423ede416f69222047d22a8861c7f1409171
SHA256
23dae68002254ef1243160a4f1419a25966706f8f2e5c89532ce7bc6245ec7cf
SHA512
cab027318910a666bbee5b3a69a677e4257aaa3023bd499ed0628eb1f43a47ef36c40d22d53664ba2223bb5617feb7f996fc646caa8be90a0d7faa373eec286d
SSDEEP
384:i+zhzMjx+LMfaci3psKYvqWSgKtSFJwuSbLk6JBv+U9e:i+JQxRvqb2dSKwuS/k6JBp
Checks for missing Authenticode signature.
resource |
---|
29a0045fedc3b504e9d41cdc286a5d61_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapFree
HeapReAlloc
GetTempFileNameA
GetTempPathA
GetProcAddress
GetModuleHandleA
MulDiv
GetTickCount
CloseHandle
WriteFile
ReadFile
CreateFileA
WaitForMultipleObjects
WaitForSingleObject
DeleteFileA
GetProcessHeap
SetFilePointer
GetModuleFileNameA
InterlockedExchange
RtlUnwind
HeapAlloc
lstrlenA
CreateProcessA
ExitThread
CreateThread
GetLastError
SetEvent
GlobalAlloc
lstrcpynA
lstrcpyA
CreateEventA
VirtualQuery
GlobalFree
SetWindowLongA
RegisterWindowMessageA
SetDlgItemTextA
wsprintfA
SetWindowTextA
SendMessageA
GetDlgItem
SetParent
CloseWindow
PeekMessageA
CharLowerBuffA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
ShowOwnedPopups
GetFocus
IsWindowVisible
ShowWindow
GetClientRect
GetWindowRect
CreateWindowExA
GetWindowLongA
EnableWindow
DestroyWindow
CallWindowProcA
MessageBoxA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegEnumValueA
RegQueryValueExA
InternetConnectA
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetSetFilePointer
InternetCrackUrlA
FindCloseUrlCache
FindFirstUrlCacheEntryA
HttpOpenRequestA
HttpSendRequestA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
one
three
two
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ