cfds
fdsce
yitrer
Static task
static1
Behavioral task
behavioral1
Sample
30c9cb8ea65b1cc43cd72298dbfb38b0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30c9cb8ea65b1cc43cd72298dbfb38b0_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
30c9cb8ea65b1cc43cd72298dbfb38b0_JaffaCakes118
Size
40KB
MD5
30c9cb8ea65b1cc43cd72298dbfb38b0
SHA1
9d0e3533b583e24173089c5d08fa5693d5af659a
SHA256
7140703ef995a1ee70f65be155fc1de5f763ada930614cefead706d30240e002
SHA512
35e10b190acf333d6558a6377937fe52ee9bd37b60a03a781eda835dd73f03cbe0b014ecd6cb3730b4244564024f843dfbcd59f8f7b973f3eaca2c8e841ee3c6
SSDEEP
384:ZahRQHhwPNcg/jcuNvRdnvkDwdH/n0ZnZXEFP3cQ3blPQszOTkRiMMvhA:MhRQYKDuN5ZvkDo/0ZyZcQLhHRi5A
Checks for missing Authenticode signature.
resource |
---|
30c9cb8ea65b1cc43cd72298dbfb38b0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
WriteFile
DeleteFileA
InitializeCriticalSection
VirtualProtectEx
VirtualProtect
GetPrivateProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
IsBadReadPtr
SetUnhandledExceptionFilter
SetThreadContext
OpenThread
MultiByteToWideChar
TerminateProcess
CreateProcessA
VirtualAlloc
GetCurrentThreadId
GetCurrentProcess
ExitProcess
GetCommandLineA
Sleep
VirtualAllocEx
TerminateThread
CreateThread
GetCurrentProcessId
CreateMutexA
GetLastError
GetModuleHandleA
LoadLibraryA
ReadProcessMemory
GetProcAddress
GetWindowTextA
CallNextHookEx
GetAsyncKeyState
ToAscii
GetWindowThreadProcessId
__CxxFrameHandler
_strupr
_strcmpi
_stricmp
_strlwr
strchr
strcat
sprintf
strcpy
strlen
strncpy
strstr
memset
memcpy
strcmp
??2@YAPAXI@Z
wcslen
strrchr
??3@YAXPAX@Z
cfds
fdsce
yitrer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ