EnumDevicePropertyNext
UnregisterFatBinary
Static task
static1
Behavioral task
behavioral1
Sample
34e9ae1923ef2888fb60f3827e89b8a4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
34e9ae1923ef2888fb60f3827e89b8a4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
34e9ae1923ef2888fb60f3827e89b8a4_JaffaCakes118
Size
180KB
MD5
34e9ae1923ef2888fb60f3827e89b8a4
SHA1
5fca0fb5bc8de64cd60647d6f606c25b1b96890a
SHA256
910d07044aa0eb735d94f00106a2154a2a569c01d4aef4f104e4c326b9151541
SHA512
6a3d78211ba19ced5df9fa7f0bd8ccacb1c24e649187e03822d96bc45cf3ee8500bfc25e8d7ecd5a43a41eb2f37d5ca752f24578d04e3fdca224fcbc91cee39a
SSDEEP
3072:CvwNAJxyAHJdSTGOfoyprA+LLX7M/5hPYdrRug+AjgUP13zKeI:CIsZHUGypc+LLLQ59YRufAZ1+
Checks for missing Authenticode signature.
resource |
---|
34e9ae1923ef2888fb60f3827e89b8a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
DeleteCriticalSection
ExitProcess
ExitThread
GetACP
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcessAffinityMask
GetProcessHeap
GetStartupInfoA
GlobalReAlloc
HeapAlloc
HeapCreate
HeapReAlloc
LCMapStringA
LeaveCriticalSection
MultiByteToWideChar
OutputDebugStringA
ReadProcessMemory
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
lstrcmpA
lstrcmpiA
lstrcpynA
GetMenu
GetMessageA
SetClassLongA
InvalidateRect
GetDlgCtrlID
FrameRect
EnumWindows
SetTimer
EndDeferWindowPos
CoCreateInstance
CreateAntiMoniker
SafeArrayCreate
SafeArrayAccessData
RegisterTypeLi
SysFreeString
EnumDevicePropertyNext
UnregisterFatBinary
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ