a
b
c
Static task
static1
Behavioral task
behavioral1
Sample
2ee47681fa64dd3266f9ae6a41e0d3a4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ee47681fa64dd3266f9ae6a41e0d3a4_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ee47681fa64dd3266f9ae6a41e0d3a4_JaffaCakes118
Size
18KB
MD5
2ee47681fa64dd3266f9ae6a41e0d3a4
SHA1
2f1afd8ff241cd6846115fa348b3e6c5f330a75f
SHA256
e8d2e7d0e4c1fd0519873516d43ed0299204e45548d373cf18f55852831a1742
SHA512
9bc0041377c27674882e7a13c1edb911a5757ba2358fb4783096c42a64b0c2557ce91b1677258a1d399636943b0ce6541343eab6769997104a7d9019585e6984
SSDEEP
384:OEy3SQWUIo4S1/Sxw/PUGlBA9yoKkxAEG3IZP18ddMG7A6FeSF:xySboRew0GlC9ymxrRZP2MG7jt
Checks for missing Authenticode signature.
resource |
---|
2ee47681fa64dd3266f9ae6a41e0d3a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
GetProcAddress
GlobalFree
GetTempFileNameA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetTempPathA
lstrcpyA
lstrcatA
MulDiv
RtlUnwind
CreateEventA
GlobalAlloc
WriteFile
GetProcessHeap
GetTickCount
HeapFree
HeapAlloc
ReadFile
lstrlenA
lstrcpynA
SetFilePointer
lstrcmpA
HeapReAlloc
CreateFileA
InterlockedExchange
GetLastError
VirtualQuery
SetDlgItemTextA
CallWindowProcA
EnableWindow
SetWindowTextA
IsWindowVisible
DestroyWindow
GetWindowRect
GetFocus
wsprintfA
GetClientRect
SendMessageA
RegisterWindowMessageA
ReleaseDC
GetDC
UpdateWindow
CharLowerBuffA
SetWindowLongA
MessageBoxA
GetWindowLongA
GetDlgItem
ShowWindow
CreateWindowExW
RegOpenKeyA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegEnumValueA
InternetSetFilePointer
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
FindCloseUrlCache
InternetOpenA
InternetCloseHandle
RestoreDC
GetFileVersionInfoSizeA
a
b
c
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ