EOVfnQVkDP
FYVfNLj
MgZOiawuajme
ikNRJVxpj
oivbuMTP
Static task
static1
Behavioral task
behavioral1
Sample
29fb576afe69c454b2ec701533d372d6_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
29fb576afe69c454b2ec701533d372d6_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
29fb576afe69c454b2ec701533d372d6_JaffaCakes118
Size
70KB
MD5
29fb576afe69c454b2ec701533d372d6
SHA1
835dc08c9ff0f9234e66b7e36416b0029c0ea998
SHA256
f7f9c1aae256e482084f772c6ecbd83eb02b4f95575673476208d041db3dd36f
SHA512
180c9580525b75536aa0fcda25ce48434cec03992c4298530686ba7cd175ad9cbd3550cc5a6cf02a6cc9f8d5edadb9da3f8544a8b7e3e1fcacae39606ae1caea
SSDEEP
1536:2hnIqG3VGcqsLjeLU5QxWrkn3aypcN3ONdipVCU8dc:3qMwcv3kwHLpVC
Checks for missing Authenticode signature.
resource |
---|
29fb576afe69c454b2ec701533d372d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
malloc
free
_XcptFilter
_initterm
_amsg_exit
_except_handler3
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
InterlockedCompareExchange
InterlockedExchange
RtlUnwind
SystemTimeToFileTime
SetEvent
GetVolumeInformationA
GetLocaleInfoA
GetTickCount
ReleaseMutex
MoveFileExA
GetWindowsDirectoryA
WritePrivateProfileStringA
MoveFileA
GetSystemTime
GetSystemDirectoryA
lstrcmpiA
lstrcmpA
GetVersionExA
CreateEventA
VirtualFree
ResumeThread
TerminateProcess
GlobalFree
GetThreadContext
VirtualQueryEx
LoadLibraryA
FreeLibrary
GlobalAlloc
VirtualAlloc
DeleteFileA
GetTempPathA
GetLastError
CreateMutexA
WaitForSingleObject
GetProcAddress
GetModuleHandleA
ExitProcess
GetVersion
CreateProcessA
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrcpynA
lstrlenA
lstrcpyA
FindAtomA
GetProcessHeap
HeapFree
ReadFile
HeapAlloc
GetFileSize
Sleep
OpenProcess
GetCurrentThreadId
GetTempFileNameA
wsprintfA
GetWindowTextA
FindWindowExA
MessageBoxA
OpenInputDesktop
GetThreadDesktop
SetThreadDesktop
FindWindowA
GetWindowThreadProcessId
CloseDesktop
ClientToScreen
GetWindowRect
GetCursorPos
EqualRect
IsWindowVisible
InflateRect
GetFocus
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
RegDeleteKeyA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
CreateProcessAsUserA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
SHDeleteValueA
SHGetValueA
SHSetValueA
SHDeleteKeyA
GetBkMode
GetBkColor
EOVfnQVkDP
FYVfNLj
MgZOiawuajme
ikNRJVxpj
oivbuMTP
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ