gcged
rewtwtw
Static task
static1
Behavioral task
behavioral1
Sample
46d56dc8201c80453fc33914e6fdcdd4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46d56dc8201c80453fc33914e6fdcdd4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
46d56dc8201c80453fc33914e6fdcdd4_JaffaCakes118
Size
40KB
MD5
46d56dc8201c80453fc33914e6fdcdd4
SHA1
e2ccd0feaa124e0b4694f052ccfe232b14a8f3c2
SHA256
870b8bb197a7d6781e74d9030b1eec2cc6dad8edd87565a10eea365651707769
SHA512
f7e56ab3fcbd7ff78a1893734e2b2ee936441ae84cb678c060099deed05b432243782c488fd7a43ff8a6221a837423451f972574023b88762fcfaf2b63dd904b
SSDEEP
384:DZW+YO35D4t7GCb/8zua8u8Q2yyeWmio0FOMUrxGdvGIuII854af9F:ktqDI/8zui8fyVnH0I/A4ImA
Checks for missing Authenticode signature.
resource |
---|
46d56dc8201c80453fc33914e6fdcdd4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
WritePrivateProfileStringA
CreateThread
SetEvent
WriteFile
TerminateThread
IsBadReadPtr
VirtualFree
GetPrivateProfileStringA
GetCommandLineA
CreateMutexA
GetCurrentProcessId
GetTickCount
VirtualFreeEx
lstrlenA
VirtualAllocEx
GetCurrentProcess
GetModuleFileNameA
VirtualAlloc
SetUnhandledExceptionFilter
SetThreadContext
OpenThread
WideCharToMultiByte
MultiByteToWideChar
TerminateProcess
CreateProcessA
ExitProcess
GetCurrentThreadId
DisableThreadLibraryCalls
VirtualProtectEx
CreateEventA
GetLastError
WaitForSingleObject
ResetEvent
CreateFileA
ReadFile
CloseHandle
Sleep
DeleteFileA
GetTempPathA
lstrcatA
GetModuleHandleA
LoadLibraryA
ReadProcessMemory
GetProcAddress
GetWindowThreadProcessId
CallNextHookEx
GetWindowTextA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
??3@YAXPAX@Z
_strcmpi
_strlwr
_stricmp
sprintf
strcat
strlen
strcpy
strstr
memset
??2@YAPAXI@Z
memcpy
strrchr
rand
srand
strncpy
strchr
strcmp
__CxxFrameHandler
gcged
rewtwtw
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ