Grd
Lze
Mbc
Pps
Qyg
Static task
static1
Behavioral task
behavioral1
Sample
2d9a61331d18b94cb3f4608be3d63d83_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d9a61331d18b94cb3f4608be3d63d83_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d9a61331d18b94cb3f4608be3d63d83_JaffaCakes118
Size
116KB
MD5
2d9a61331d18b94cb3f4608be3d63d83
SHA1
5c3530011efe38b4ea20b0446118a1183c762c3f
SHA256
1874fa0cffa7862af6f03853a82011a4a74df36bcf97d1e9f304bee30ec17c3f
SHA512
d34d81b0349179361cfbb39d0b4845fcfe21e37a91619e351f61620652f6a07d2100a8f0654e3b5e0f9e28d033569f614444e015fb4603cd82797d46fc0dc5e2
SSDEEP
1536:xDbsCG4vHTOlpda/wDsH18Q+Ju4A1wIbhD6HJeeEKGKIKMMiU1aoauY:ho8L2sQ21MY4A1BhOpZLIKMMiU1m9
Checks for missing Authenticode signature.
resource |
---|
2d9a61331d18b94cb3f4608be3d63d83_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VariantClear
SysFreeString
SysAllocStringLen
LoadTypeLib
OpenServiceA
QueryServiceStatus
SetSecurityDescriptorDacl
StartServiceA
CloseServiceHandle
ControlService
CreateServiceA
DeleteService
AdjustTokenPrivileges
InitializeSecurityDescriptor
OpenProcessToken
StgCreateDocfileOnILockBytes
CoLockObjectExternal
CoRevokeClassObject
OleInitialize
CoDisconnectObject
ShowCursor
SetFocus
SetCursor
OemToCharW
IsCharUpperA
EnableScrollBar
EmptyClipboard
DrawTextA
DialogBoxParamA
DefDlgProcA
CharUpperA
ChangeMenuA
BeginPaint
wsprintfA
ShowOwnedPopups
SHFileOperationA
SHGetFileInfoA
SHGetMalloc
SHBindToParent
StrChrA
SHAutoComplete
PathFileExistsA
PathCompactPathExA
PathAppendA
PathUnquoteSpacesA
PathQuoteSpacesA
PathIsRootA
PathFindExtensionA
PathFindFileNameA
memchr
malloc
getenv
fflush
rand
realloc
__dllonexit
sscanf
strchr
strcmp
strstr
strlen
GetACP
GetLastError
InitializeCriticalSection
OpenFile
ReadFile
TlsSetValue
VirtualFree
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpynA
Grd
Lze
Mbc
Pps
Qyg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ