fa
fc
Static task
static1
Behavioral task
behavioral1
Sample
49bcaefc70340ac3867babe9dfd18df9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49bcaefc70340ac3867babe9dfd18df9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
49bcaefc70340ac3867babe9dfd18df9_JaffaCakes118
Size
10KB
MD5
49bcaefc70340ac3867babe9dfd18df9
SHA1
78d3a7fb8755d2245844aed1e26890c0ed5ede34
SHA256
462a0acc7374ebe57b2f3c666bfc6f9227b326a0100a37a4d75ba09c347cf761
SHA512
0e175a0e99814c8d53b4f3e59a7e34a21c8c0e7e8d2348f9d1a868ebd5d00293860afcef9bbb4e5bb858b96dd25dfa2e88e2458055102acd28cc5927ffb76ac9
SSDEEP
96:r1uTPx5CiqkTQn1zx+YB/73Xl/ZcVNfE+XpfK0Wx7mmGE/hafnNhQ3y:r1uDx5CvKQZZcbpfKfSmG3j
Checks for missing Authenticode signature.
resource |
---|
49bcaefc70340ac3867babe9dfd18df9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
Sleep
VirtualProtectEx
GlobalFree
ReadProcessMemory
WideCharToMultiByte
GlobalAlloc
IsBadReadPtr
GetPrivateProfileStringA
GetProcAddress
GetModuleHandleA
CreateThread
GetModuleFileNameA
GlobalLock
GetCurrentProcess
CallNextHookEx
SetWindowsHookExA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
_adjust_fdiv
malloc
_stricmp
_initterm
free
strcat
strrchr
??3@YAXPAX@Z
strcpy
??2@YAPAXI@Z
sprintf
strlen
strncpy
strchr
strstr
fclose
fread
fopen
memset
memcpy
strcmp
fa
fc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ