a
b
c
Static task
static1
Behavioral task
behavioral1
Sample
439dd58d66036cb8b75027f4608894a5_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
439dd58d66036cb8b75027f4608894a5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
439dd58d66036cb8b75027f4608894a5_JaffaCakes118
Size
18KB
MD5
439dd58d66036cb8b75027f4608894a5
SHA1
2f05e69136c603efb478e5adbd47625f51d35cce
SHA256
28b48c373fbf9dc6ec1ea6aa357cf1be47fe58e0057cceae52eef0536eb8baf4
SHA512
f7cb141f1840d5dc77d4e7d2a5658a0194bb8d46671a9b41b380e07189cac2c52fc6a71aeced69b033ac6178d98f9f726358d1604db56d3700b394ee862ce21f
SSDEEP
384:VIL8Acv6S5oRJTbkhVbK65aPK9+Dz26WcDtRJQN1cF1rRCFUOfvjbwm:Vg8zvHoR8hK0H+Dz26WcDtRJQN1cnrRb
Checks for missing Authenticode signature.
resource |
---|
439dd58d66036cb8b75027f4608894a5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
MultiByteToWideChar
GetProcAddress
GlobalFree
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetTempPathA
ReadFile
CreateEventA
RtlUnwind
GlobalAlloc
WriteFile
GetProcessHeap
GetTickCount
HeapFree
HeapAlloc
lstrcpyA
GetFileAttributesA
lstrlenA
GetThreadLocale
GetSystemDefaultLCID
GetUserDefaultLCID
lstrcpynA
HeapReAlloc
SetFilePointer
lstrcmpA
CreateFileA
InterlockedExchange
GetLastError
VirtualQuery
SetDlgItemTextA
CallWindowProcA
EnableWindow
SetWindowTextA
IsWindowVisible
DestroyWindow
GetWindowRect
GetFocus
wsprintfA
GetClientRect
SendMessageA
RegisterWindowMessageA
SetWindowLongA
AnyPopup
IsWindow
MessageBoxA
GetWindowLongA
GetDlgItem
ShowWindow
CreateWindowExW
RegQueryValueExA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegSetValueExA
HttpOpenRequestA
InternetSetFilePointer
InternetOpenA
InternetCloseHandle
InternetConnectA
RestoreDC
a
b
c
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ