fa
fc
Static task
static1
Behavioral task
behavioral1
Sample
2ffdca0be8b8b85a7dcf34246c16efdf_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ffdca0be8b8b85a7dcf34246c16efdf_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ffdca0be8b8b85a7dcf34246c16efdf_JaffaCakes118
Size
7KB
MD5
2ffdca0be8b8b85a7dcf34246c16efdf
SHA1
10aa8bf8a6b571b2a52755c9a9a15e910c2c05bc
SHA256
b90f08bd3881e7aabc8d7bcd33c64952c0974da34693e198c0958f991165c898
SHA512
a47f6aa0957acdcbf59b207f628cce13699148e05b56b1e659d309ab7749a601791c5c6d9b40c59f90673214cd08df47d5001fbdd0eeedbb54550a51b8e788a6
SSDEEP
96:VCmSlbcjlipiyRRgfMzaC4dS2li+yLVJOJmqk95Rc6:kcspiwsPiDVgJmqah
Checks for missing Authenticode signature.
resource |
---|
2ffdca0be8b8b85a7dcf34246c16efdf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
GetComputerNameA
WriteProcessMemory
ReadProcessMemory
GetCurrentProcessId
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
Sleep
GetCurrentProcess
ExitProcess
GetWindowThreadProcessId
GetWindowTextA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
FindWindowA
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
sprintf
_adjust_fdiv
malloc
_initterm
free
memcpy
strchr
strncpy
strrchr
??3@YAXPAX@Z
memset
??2@YAPAXI@Z
_stricmp
strcmp
strcat
strcpy
strlen
fa
fc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ