READK1
SBS047
Static task
static1
Behavioral task
behavioral1
Sample
2fc96cd5a43d812a3b7a778795818851_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2fc96cd5a43d812a3b7a778795818851_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2fc96cd5a43d812a3b7a778795818851_JaffaCakes118
Size
71KB
MD5
2fc96cd5a43d812a3b7a778795818851
SHA1
ea6220c02f3aa3aa2d79702e9f1b16d1f6c9ba88
SHA256
15e51625b1ece9dee64bcec04edb4d8b493a709b2eca052e48d4bafe7911075c
SHA512
031b2796d94bd2359fbbb9aa14811702aa23f58290b374b4366e50408a2ee38dba9bdc12b8a2d942cf48fb15eca46a929b78f6549f89a0f4274d44acf5acb9fa
SSDEEP
1536:XI9VlSM4fIRj2OWkyuXsUagoXBSY7Mpqr2L+5tI07:GVlSM4fCj2YskQkaE0
Checks for missing Authenticode signature.
resource |
---|
2fc96cd5a43d812a3b7a778795818851_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
CreateFileA
ExitProcess
GetCommandLineA
GetFileSize
GetFileType
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStringTypeA
GetVersionExA
GlobalAlloc
GlobalFree
LoadLibraryA
MultiByteToWideChar
OutputDebugStringA
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID
GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy
CharLowerBuffA
CharNextA
CharUpperBuffA
MessageBoxA
LAYOUT
CSZ
OVRSTR
OVRNUM
OVRPER
READK1
SBS047
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ