Tbrrjyx
Cgdapoob
Invulnxg
BeginYrhmmatobby
Yxkxeongp
CreateVjpgmpoekxp
Cnoodotjcq
CloseTolsqpdconp
Mndjlwloby
Ybguyidjjd
Pmnewohm
Ytwhira
WriteVtmwwqdt
Daglatwll
CreateNptinpo
Kiynethiwf
IsEhgpfnjsen
IsBxtkdnow
OpenClxecuqdyes
InitTpcehswy
Static task
static1
Behavioral task
behavioral1
Sample
487669ad9ac70eb9ed22e06bbce14f99_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
487669ad9ac70eb9ed22e06bbce14f99_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
487669ad9ac70eb9ed22e06bbce14f99_JaffaCakes118
Size
41KB
MD5
487669ad9ac70eb9ed22e06bbce14f99
SHA1
a297ba70c1f1710c569f1488d29b9214ce566b1e
SHA256
d9db781e159140f72bfc934940422aadaa8cfbf4282e353d3a9279e89ed40231
SHA512
41f1693b8237834d642c56c01d24199956cc3cf5a7937b613bf4294142c58aa68355a3499106186dabd1009059859d224eb41949eb86081ea19988262be41a82
SSDEEP
768:MMCAHC6bzzkraw8wAzCWV2qQUAyicli+ZWQVwr9pVVeDOUpSF:NLiCk2w8NzCW0yXli+Zn6r9cJpSF
Checks for missing Authenticode signature.
resource |
---|
487669ad9ac70eb9ed22e06bbce14f99_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ResumeThread
ExitThread
VirtualAlloc
CreateNamedPipeA
ExitProcess
GetFileAttributesExA
VirtualProtect
SetFileApisToANSI
GetTempFileNameA
GlobalCompact
GetTimeFormatA
LocalFlags
SetVolumeLabelA
PurgeComm
SetInformationJobObject
UnregisterHotKey
ModifyMenuA
PostThreadMessageA
SetMenuContextHelpId
ChangeDisplaySettingsExA
CopyRect
RemovePropA
BroadcastSystemMessageExW
EnumDisplaySettingsExA
GetMenuState
PostThreadMessageW
GetClassNameA
SetWindowLongA
CharLowerBuffA
GetDialogBaseUnits
Tbrrjyx
Cgdapoob
Invulnxg
BeginYrhmmatobby
Yxkxeongp
CreateVjpgmpoekxp
Cnoodotjcq
CloseTolsqpdconp
Mndjlwloby
Ybguyidjjd
Pmnewohm
Ytwhira
WriteVtmwwqdt
Daglatwll
CreateNptinpo
Kiynethiwf
IsEhgpfnjsen
IsBxtkdnow
OpenClxecuqdyes
InitTpcehswy
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ