e
l
r
Static task
static1
Behavioral task
behavioral1
Sample
347ecdca76c9b717c47c063defe52b07_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
347ecdca76c9b717c47c063defe52b07_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
347ecdca76c9b717c47c063defe52b07_JaffaCakes118
Size
16KB
MD5
347ecdca76c9b717c47c063defe52b07
SHA1
79ebe3fe6a78d24673ba6c0f81e8d0292cdbafc0
SHA256
961051fef17ac5e25cbac2063d5636d145f23d8d0190fbaa832e6484e424d734
SHA512
cc2a98aacc196df44f38c4b89ff6bf21c88584b29e3ac997b22cd9f55e1d481a366924715b9bc35debb918559ded1f5b095e3c556433bb35450975e9440beaeb
SSDEEP
384:cPE6A2u/+wX5AmoIA90a40MfJSC7annvKDVbKyZtb5ht5Gc9QPDG4LjK:E5wPoIA90t0EIhnvKDbHbXt5Gc9+Dx
Checks for missing Authenticode signature.
resource |
---|
347ecdca76c9b717c47c063defe52b07_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
GetTickCount
CloseHandle
WriteFile
ReadFile
CreateFileA
lstrcatA
lstrcmpA
SetFilePointer
CreateEventA
GetProcAddress
GetTempPathA
GetFileAttributesA
HeapReAlloc
HeapFree
ResetEvent
GetLastError
GetSystemDefaultLCID
GlobalFree
GetUserDefaultLCID
GetProcessHeap
HeapAlloc
GlobalAlloc
lstrcpynA
lstrcpyA
GetModuleHandleA
lstrlenA
GetClientRect
wsprintfA
CallWindowProcA
DestroyWindow
EnableWindow
CreateWindowExW
SetWindowLongA
SetDlgItemTextA
MessageBoxA
wsprintfW
SetWindowTextA
SendMessageA
GetDlgItem
GetFocus
IsWindowVisible
ShowWindow
RegisterWindowMessageA
GetWindowRect
CreateWindowExA
GetWindowLongA
IsWindow
ReleaseDC
AnyPopup
RegOpenKeyExA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
InternetSetFilePointer
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
e
l
r
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ