curehowum
ekecusiku
kijonama
nijiqeme
okozeqiqu
owaturev
ribufepoki
sodubitad
utelogox
Static task
static1
Behavioral task
behavioral1
Sample
3e208f074001a60743c0a49e9c737055_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e208f074001a60743c0a49e9c737055_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e208f074001a60743c0a49e9c737055_JaffaCakes118
Size
572KB
MD5
3e208f074001a60743c0a49e9c737055
SHA1
ec2a62c9659c79eb23c1ef0e93d4ec226a15778c
SHA256
d1ff0a0c6d0a01b7b5a71fc18bfac16c7438e2899c2ebed7debc089bde962842
SHA512
960c024725bc5aae1f0075d3d823e8f299586738b7b0bc056c5dedf4c6bde5fdd2a269e456f5c521b996aac7bb39723bdb66525795c0e238044f372397cb6fa7
SSDEEP
12288:azPsMvynKPhAcDmicHAMThpZTHQeBex+r9b0pCVNgsScGXakYjJbtd3GJU:HPKpAcdqp+4eUrxO+AXtYjJBZGO
Checks for missing Authenticode signature.
resource |
---|
3e208f074001a60743c0a49e9c737055_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
InterlockedExchange
VirtualQuery
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
curehowum
ekecusiku
kijonama
nijiqeme
okozeqiqu
owaturev
ribufepoki
sodubitad
utelogox
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ