ConfigTranslator
ConfigureDlgProc
SQLDataSourceToDriver
SQLDriverToDataSource
Static task
static1
Behavioral task
behavioral1
Sample
4536fb001a034ef4a65997f5df59fd6e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4536fb001a034ef4a65997f5df59fd6e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4536fb001a034ef4a65997f5df59fd6e_JaffaCakes118
Size
187KB
MD5
4536fb001a034ef4a65997f5df59fd6e
SHA1
cabe1c33d745aa6633c2a24aaab34d8e75ddf60a
SHA256
925c87e80587ea0b2794fc8b8f0851fe3ab74a093d48e21d29b550caaefdd185
SHA512
947809528e81a95a1decfc7236fa3b69a1c0ecbb582124395d7d084396baf43bc62383ba1caec81d81d5487a838453f3b9dd2a84f454b8a566308a60d1389a96
SSDEEP
3072:NXPUgJpTerJqW/K5yxi+5FcgrbJidimBrUspouIz6A0/bNMxSyg0T+n:JUgJpTerR/K5yxFcgrU6puIz6A0/yxMm
Checks for missing Authenticode signature.
resource |
---|
4536fb001a034ef4a65997f5df59fd6e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
malloc
_adjust_fdiv
strncmp
_assert
__p___mb_cur_max
_initterm
free
tolower
atol
__p__pctype
_isctype
lstrlenA
_lclose
GlobalAlloc
LoadLibraryA
GetSystemDirectoryA
lstrcatA
GlobalLock
FreeLibrary
_lread
GetVersion
OpenFile
GetProcAddress
GlobalUnlock
GlobalHandle
GlobalFree
SetWindowLongA
OemToCharA
wsprintfA
DialogBoxParamA
EndDialog
SendDlgItemMessageA
GetWindowLongA
MessageBoxA
LoadStringA
MoveWindow
GetWindowRect
GetDesktopWindow
ClientToScreen
GetClientRect
GetParent
ConfigTranslator
ConfigureDlgProc
SQLDataSourceToDriver
SQLDriverToDataSource
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ