x
y
z
Static task
static1
Behavioral task
behavioral1
Sample
2b0bb1dfb9a7d5ca68ae8c6a1c10bad1_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2b0bb1dfb9a7d5ca68ae8c6a1c10bad1_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2b0bb1dfb9a7d5ca68ae8c6a1c10bad1_JaffaCakes118
Size
35KB
MD5
2b0bb1dfb9a7d5ca68ae8c6a1c10bad1
SHA1
fac57e9d79feb796f631790854d7156e81e99439
SHA256
a222f99ff78323c2ae76f359470beb10a9d81e695092153c63dfec780d5683df
SHA512
8f8a000d89642594b1d4ab23fc59df40880380329e1017fb96e20a671f803eb279b24e87cb883bc67c37d9eda2d33151c3dc09bf3889b8c6262dd736f7897ef2
SSDEEP
384:j5GohEgsQC1iZmAW0Of5DyoBlSDihyUgWTBgWrVpJj6YZCTR38mlj+R2vMjSQJ7Q:j5G+zsQM3n4lj3yJrR8vd8ZCJMDNE
Checks for missing Authenticode signature.
resource |
---|
2b0bb1dfb9a7d5ca68ae8c6a1c10bad1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTempFileNameA
GetTempPathA
GetModuleHandleA
MulDiv
GetTickCount
CloseHandle
CreateFileA
WaitForMultipleObjects
WaitForSingleObject
DeleteFileA
CreateEventA
SetFilePointer
GetModuleFileNameA
HeapReAlloc
InterlockedExchange
RtlUnwind
HeapFree
GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleW
ReleaseMutex
ReadFile
lstrlenA
CreateProcessA
GetLastError
VirtualQuery
WriteFile
FindNextFileW
GlobalAlloc
lstrcpynA
lstrcpyA
GlobalFree
PeekMessageW
CallWindowProcA
DestroyWindow
EnableWindow
GetWindowLongA
CreateWindowExA
RegisterWindowMessageA
SetWindowLongA
SetDlgItemTextA
MessageBoxA
wsprintfA
SetWindowTextA
SendMessageA
GetDlgItem
GetFocus
IsWindowVisible
CharLowerBuffA
ShowWindow
GetClientRect
GetWindowRect
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyW
RegCreateKeyW
RegEnumValueA
RegOpenKeyExA
InternetReadFile
InternetSetFilePointer
HttpOpenRequestA
InternetCrackUrlA
FindCloseUrlCache
FindFirstUrlCacheEntryA
InternetCloseHandle
InternetOpenA
InternetConnectA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
x
y
z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ