Exbcute
SMsg
Static task
static1
Behavioral task
behavioral1
Sample
4c1158d1cb39318c78b239acacad0766_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c1158d1cb39318c78b239acacad0766_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4c1158d1cb39318c78b239acacad0766_JaffaCakes118
Size
23KB
MD5
4c1158d1cb39318c78b239acacad0766
SHA1
3f89d32cb88e5c82627252a34df4e08dd7a85b5b
SHA256
c778cdf7978467d00b12eb4e4629284ccfc25c88c1966a770ae39ddead59a0d8
SHA512
9c9a8f471b7b39fc8c9b91071947ac0b618207d5a18c123943a01ba3232b7b596479c82b40e47b12a4172bf0d69fd80e3bf7ae1c9da3bc0fcb68d173f198a75d
SSDEEP
384:bUdGbrrO1b31pQ8Sc+GmWt0/7uRRkVzW/bMTMR9CHomq:bxQlC8JsCYQzMiCH
Checks for missing Authenticode signature.
resource |
---|
4c1158d1cb39318c78b239acacad0766_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
GetProcAddress
lstrcmpA
GetLogicalDrives
GetProcessHeap
GetSystemDirectoryA
lstrcatA
FindFirstFileA
GetLogicalDriveStringsA
GetTempFileNameA
LoadLibraryA
GetModuleFileNameA
FindNextFileA
GetModuleHandleA
lstrcpyA
GetFileSize
SetFilePointer
HeapAlloc
GetTickCount
ReadFile
FindClose
DeviceIoControl
DeleteFileA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent
EnumWindows
CopyIcon
FindWindowA
LoadCursorA
GetWindowThreadProcessId
wsprintfA
SetupDiSetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiCreateDeviceInfoListExA
SetupDiCreateDeviceInfoA
SetupDiDestroyDeviceInfoList
SetupDiGetINFClassA
Exbcute
SMsg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ