Ordinal1
Ordinal2
fOrdchk24044
Static task
static1
Behavioral task
behavioral1
Sample
4767cd19be3c03d8657839905f8e14a2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4767cd19be3c03d8657839905f8e14a2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4767cd19be3c03d8657839905f8e14a2_JaffaCakes118
Size
52KB
MD5
4767cd19be3c03d8657839905f8e14a2
SHA1
7f70f23269497948fc6f42289a33a370dc2e137e
SHA256
0258f67231327ad9c38862c0efa5ae193ecfb99842dbf1c8496aa2c0e40be60c
SHA512
db16d5f699af9ea177a6a42e37916c8252f919622cdfd1f9208d59a9c6da9c76716525fb8acbfe26ca500d483be2d39919f9cc7e32e0a28eb3c1c3a39234227d
SSDEEP
768:Gckr3P46FhjEAXXXsXXQ1CVQYy0ZPLBHWppxfSlwPQDI/jo93FmGb+S:GcU4Uho819YyIx6jfhPQmoDX3
Checks for missing Authenticode signature.
resource |
---|
4767cd19be3c03d8657839905f8e14a2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTickCount
DeleteFileA
lstrcatA
GetTempPathA
CreateEventA
lstrlenA
lstrcpyA
GetCommandLineA
VirtualProtect
CloseHandle
CreateFileA
LoadLibraryA
lstrcmpiA
GetProcAddress
VirtualFree
VirtualAlloc
GetStringTypeW
GetStringTypeA
GetVersion
HeapFree
GetLastError
WriteFile
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
RtlUnwind
wsprintfA
Ordinal1
Ordinal2
fOrdchk24044
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ