?SetMegaFunction@@YGPAXKKK@Z
?SetSuperFunction@@YGPAXKKKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
4c154a949b4318927d0c389db56197ff_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c154a949b4318927d0c389db56197ff_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4c154a949b4318927d0c389db56197ff_JaffaCakes118
Size
95KB
MD5
4c154a949b4318927d0c389db56197ff
SHA1
a138d13502ec0364bf5ce7a421ab12d391e586be
SHA256
c6ce06927991f84e33935d5badb7fd1c7e3da62cacc62fa27d5c4c9a02a7322a
SHA512
de9ab1a6c79421b6c24d1b17604e65d494a40b8bfaa881e7e213f9e992a768737c38feae33aa8da10a190b85510144ff93006527eafffee1e2bde8c163413079
SSDEEP
1536:LcZ3okL4trT8tpEUiUbFYejW6m8TTIHrei9H9hu8yuEJhl33AGU8IW7LkiA5M6:ORctrT8AEFDCDGSeyzGJhlgd8tLVA5
Checks for missing Authenticode signature.
resource |
---|
4c154a949b4318927d0c389db56197ff_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetOpenA
InternetOpenUrlA
CloseHandle
HeapAlloc
GetProcessHeap
GetCurrentProcess
HeapFree
WaitForSingleObject
OpenProcess
GlobalAlloc
LoadLibraryA
ReadProcessMemory
HeapDestroy
HeapCreate
ReadFile
GlobalFree
OpenThread
MoveFileA
GetExitCodeThread
CompareStringA
GetCurrentThreadId
WriteProcessMemory
SuspendThread
ReleaseSemaphore
CreateSemaphoreA
TerminateThread
GetActiveWindow
DrawTextA
MoveWindow
ModifyMenuA
UpdateWindow
PostMessageA
ShowWindow
InvalidateRect
SetWindowLongA
GetMenu
GetForegroundWindow
SendMessageA
DrawIcon
GetWindowInfo
LoadIconA
GetWindowRect
ReleaseDC
FindWindowA
GetDC
BitBlt
LineTo
SelectObject
DeleteDC
CreateCompatibleDC
memset
?SetMegaFunction@@YGPAXKKK@Z
?SetSuperFunction@@YGPAXKKKK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ