Nnoasebnnak
CloseYvlraokovgj
Lqjejsjyt
Static task
static1
Behavioral task
behavioral1
Sample
32d2e64e8cd9542364002f880f1b47a2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
32d2e64e8cd9542364002f880f1b47a2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
32d2e64e8cd9542364002f880f1b47a2_JaffaCakes118
Size
120KB
MD5
32d2e64e8cd9542364002f880f1b47a2
SHA1
d8e494a1660e0aa4a1ec0e9532ba7293c098d7ee
SHA256
163a951ff16304f0ce4afb89b48accceb1ed10d70589d600799fcc805684d647
SHA512
d00a1be963c15db8d80a8955b4f5897a224576c6b709c4742a95aaed01646729d535ee7ad244eb8ca57d0f4dc74f4092c55c2cada3a329f0308054cd9685f443
SSDEEP
1536:T6jlhtxFZQbqBbVbzNHdB/J/rpuYFIPbcpaUNOE+k5AEuyMB6nVYGCP18:T65hVtTJ/9uJPbejIE+VR3sYrt8
Checks for missing Authenticode signature.
resource |
---|
32d2e64e8cd9542364002f880f1b47a2_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcessHeap
GetEnvironmentStringsA
GetModuleHandleA
GetStartupInfoA
VirtualAlloc
GetFileAttributesExA
SetFileApisToANSI
CopyFileExW
lstrcmp
UpdateResourceA
ReadConsoleA
GetConsoleFontSize
RemoveDirectoryA
GetCompressedFileSizeA
SetFilePointer
lstrcmpi
SetVDMCurrentDirectories
GetExpandedNameA
GetDllDirectoryA
GetMailslotInfo
OpenSemaphoreA
WriteConsoleA
GetProfileIntA
OpenEventA
GetStartupInfoA
ReadFile
GetAtomNameA
FreeResource
FindFirstVolumeMountPointA
WritePrivateProfileSectionA
ClearCommBreak
GlobalSize
GetCommandLineA
GetConsoleOutputCP
RemoveFontResourceA
DefRawInputProc
LoadBitmapA
PrivateExtractIconsA
ReuseDDElParam
SetSystemCursor
LoadIconA
SetCapture
BroadcastSystemMessageExA
DrawFrameControl
LoadBitmapA
SetWindowsHookA
CloseWindowStation
GetMessagePos
GetAppCompatFlags2
DragObject
GetMessagePos
IsDlgButtonChecked
GetAltTabInfoA
SetMenu
IsChild
KillTimer
DrawFrameControl
GetWindowTextA
GetClassNameA
EnumDisplayDevicesA
DrawEdge
GetWindowModuleFileNameA
SubtractRect
Nnoasebnnak
CloseYvlraokovgj
Lqjejsjyt
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ