bohaqihox
bukunapimi
dejojeyupe
fuqemuvoh
godorufu
hixihume
iculobiqo
jubeluceyox
kokidaxupip
pimeturigare
Static task
static1
Behavioral task
behavioral1
Sample
2b72d06ae6192729439785bb4bd96da7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b72d06ae6192729439785bb4bd96da7_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2b72d06ae6192729439785bb4bd96da7_JaffaCakes118
Size
564KB
MD5
2b72d06ae6192729439785bb4bd96da7
SHA1
6a7be2f2ab1e0233834f19f4d7e624905bafc5e5
SHA256
1af06934c6a0af0744fa4ac5c68cd17c4b084f72b647be0fd0ea3925650b8be0
SHA512
a70b0c05f677926202a94f2c771375d9390a97a9bdc09161090f20da47dadc88a7279ce98da33008d5746a2e77285870667ca80de7a2f20f72efda0729d67b65
SSDEEP
12288:V5G56dH2uDnkHE/aZS14/RSiRSuf7x/1d8r4so:+6h2GEESUFufV/fe
Checks for missing Authenticode signature.
resource |
---|
2b72d06ae6192729439785bb4bd96da7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RtlUnwind
RaiseException
GetCurrentThreadId
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
HeapAlloc
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
InterlockedExchange
VirtualQuery
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
bohaqihox
bukunapimi
dejojeyupe
fuqemuvoh
godorufu
hixihume
iculobiqo
jubeluceyox
kokidaxupip
pimeturigare
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ