AD_Decode
AD_End
AD_Init
AD_Restart
AD_SetOption
VD_Decode
VD_End
VD_Init
VD_Restart
VD_SetOption
Static task
static1
Behavioral task
behavioral1
Sample
3434e8e3c119d9850a10d23c78625f34_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3434e8e3c119d9850a10d23c78625f34_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3434e8e3c119d9850a10d23c78625f34_JaffaCakes118
Size
965KB
MD5
3434e8e3c119d9850a10d23c78625f34
SHA1
4ae09c472d806e14d58b48d4223aa56ca765052a
SHA256
c3e3909c2a1514bdafe8f25b3f0726d015bfbb1a2f7a6bf7842de5ea764ba449
SHA512
ad70820e6251c59913ac31b591a72a5c199bb7ee9a345fe437b13807e025e329bebeff7200bb8da9682fd937d277526c4e9c7e6c32ba5c76513273e9042d59af
SSDEEP
24576:4Zexhi3CbfM97f0U3BwW8Ljbybw9HREf0s:dhiB7P/GfvEfX
Checks for missing Authenticode signature.
resource |
---|
3434e8e3c119d9850a10d23c78625f34_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
abort
AD_Decode
AD_End
AD_Init
AD_Restart
AD_SetOption
VD_Decode
VD_End
VD_Init
VD_Restart
VD_SetOption
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ