DeleteSelf
wdof
wdon
Static task
static1
Behavioral task
behavioral1
Sample
3eb170178c92fd9064fca2bffc500204_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3eb170178c92fd9064fca2bffc500204_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3eb170178c92fd9064fca2bffc500204_JaffaCakes118
Size
23KB
MD5
3eb170178c92fd9064fca2bffc500204
SHA1
a468ce11f3250a23b7cdf466f38497b2a8777260
SHA256
26a6d28ac1cacaaf2ea0af4fe29d4e255d0e1c5200a0b73ebcfcd0106705bdc7
SHA512
db46dffdad6cf23a3c0c89bd4325ab7e9aab235d0c0e3d6ca22ab45d2a9fe2fce83edd9a02a8f6f79c4f84debf861f0e25dd40cc083fad7c669cc86ed0da4864
SSDEEP
384:OdwgrkwHzxXEojbIdn04iLs9K5VwcxQy997dDBaP95P6:ng4CJEGI3AHYcQS1aF5P6
Checks for missing Authenticode signature.
resource |
---|
3eb170178c92fd9064fca2bffc500204_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteFile
GetTempPathA
WritePrivateProfileStringA
CreateThread
GetPrivateProfileStringA
IsBadReadPtr
DeleteFileA
SetFileAttributesA
SizeofResource
LockResource
LoadResource
FindResourceA
CopyFileA
GetModuleFileNameA
GetCurrentProcessId
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
CreateFileA
CloseHandle
GetTickCount
lstrcmpiA
lstrcpynA
lstrlenA
lstrcpyA
lstrcmpA
Sleep
ExitProcess
GetSystemDirectoryA
lstrcatA
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleHandleA
OutputDebugStringA
PostThreadMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
InternetReadFile
HttpSendRequestA
InternetQueryDataAvailable
InternetOpenA
InternetCloseHandle
HttpOpenRequestA
??2@YAPAXI@Z
strstr
memmove
strrchr
sprintf
_beginthread
DeleteSelf
wdof
wdon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ