e
l
r
Static task
static1
Behavioral task
behavioral1
Sample
38a9cb814f99d84407b9fe51ba6be80e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
38a9cb814f99d84407b9fe51ba6be80e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
38a9cb814f99d84407b9fe51ba6be80e_JaffaCakes118
Size
17KB
MD5
38a9cb814f99d84407b9fe51ba6be80e
SHA1
1f1b0d415383e7b6bbd9768effcfeb2d43958036
SHA256
89c7986758430d5c4c7ca30c513a554309fb30cd5542e04fc371ab07a0566505
SHA512
70a5c2db0e427ca8ce6206d34e58244b5c636fed85b02150468a68f20680e0a10a9a2239b41d63f3b1d706e2c5bf9aeade341119c4e59c8a3f1f57950c4fc048
SSDEEP
384:ui3yuP6uUmOyhYykKKioawcNFdon+6DlFKvt:75Um96yG1cnqn+6DW
Checks for missing Authenticode signature.
resource |
---|
38a9cb814f99d84407b9fe51ba6be80e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
WriteFile
ReadFile
CreateFileA
WideCharToMultiByte
lstrcatA
lstrcmpA
SetFilePointer
CreateEventA
GetTickCount
GetModuleHandleA
RtlUnwind
GetProcAddress
GetTempPathA
GetFileAttributesA
HeapReAlloc
HeapFree
GetProcessHeap
GetModuleFileNameA
MultiByteToWideChar
lstrlenA
GetThreadLocale
GetSystemDefaultLCID
GetUserDefaultLCID
VirtualQuery
HeapAlloc
GlobalAlloc
lstrcpynA
lstrcpyA
InterlockedExchange
GlobalFree
GetLastError
ReleaseDC
wsprintfA
CallWindowProcA
DestroyWindow
EnableWindow
CreateWindowExW
RegisterWindowMessageA
SetWindowLongA
SetDlgItemTextA
MessageBoxA
wsprintfW
SetWindowTextA
SendMessageA
GetDlgItem
GetFocus
IsWindowVisible
IsWindow
ShowWindow
GetClientRect
GetWindowRect
CreateWindowExA
GetWindowLongA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
InternetConnectA
InternetOpenA
InternetCloseHandle
InternetSetFilePointer
HttpOpenRequestA
RestoreDC
e
l
r
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ