Exbcute
SMsg
Static task
static1
Behavioral task
behavioral1
Sample
2caf73f8162f90a925295be77b6da8c6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2caf73f8162f90a925295be77b6da8c6_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2caf73f8162f90a925295be77b6da8c6_JaffaCakes118
Size
54KB
MD5
2caf73f8162f90a925295be77b6da8c6
SHA1
1143f92eced803e05a5a6e1dd7df1f5216b57fbe
SHA256
874f4f07583b5c33050eb4d4879cffef9c9985e5136359dc82d37bef1fa85921
SHA512
a039dfef4e3555c31dd538aa6a7144c2cd52b8bea015eff150317fa936a795c722175cbde6282c3d9683d29f472cdf8d92126f112c250de3cc3171440a578955
SSDEEP
768:bxQlC8JsCYQzMiCHDBCHxh7n/BurWdHdu:6C8JBYYwDBwx5yqHd
Checks for missing Authenticode signature.
resource |
---|
2caf73f8162f90a925295be77b6da8c6_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
GetProcAddress
lstrcmpA
GetLogicalDrives
GetProcessHeap
GetSystemDirectoryA
lstrcatA
FindFirstFileA
GetLogicalDriveStringsA
GetTempFileNameA
LoadLibraryA
GetModuleFileNameA
FindNextFileA
GetModuleHandleA
lstrcpyA
GetFileSize
SetFilePointer
HeapAlloc
GetTickCount
ReadFile
FindClose
DeviceIoControl
DeleteFileA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent
EnumWindows
CopyIcon
FindWindowA
LoadCursorA
GetWindowThreadProcessId
wsprintfA
SetupDiSetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiCreateDeviceInfoListExA
SetupDiCreateDeviceInfoA
SetupDiDestroyDeviceInfoList
SetupDiGetINFClassA
Exbcute
SMsg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ