GetCaptureDeviceFormat
UpdateFromAppChange
Static task
static1
Behavioral task
behavioral1
Sample
59ad8affcd1068c424dd40bdb44be2f7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59ad8affcd1068c424dd40bdb44be2f7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
59ad8affcd1068c424dd40bdb44be2f7_JaffaCakes118
Size
167KB
MD5
59ad8affcd1068c424dd40bdb44be2f7
SHA1
e177105a04318f06d20bb317688936a6e13ac1f8
SHA256
1490776f063c4fdd3d3e3bcf7522d42b02ace602fa9b70c860e11b573e18b70f
SHA512
46197ff8f90c50c1b19d484248b8cb55e5eed02c9bbd6170a22c1e593b90f2c2591746bda89f73d24a4d708798108fdb6b72217a6e77f2e4f8d3e87dae5518fa
SSDEEP
3072:elTrglu1wGGlZXREzgv76qDsYfGcNsgcJntOzLMqwPcWyDkcJrYXegJj:OTr4GGlZhqW76YjGcNoJnQzL1wUnDTYN
Checks for missing Authenticode signature.
resource |
---|
59ad8affcd1068c424dd40bdb44be2f7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
ExitProcess
FindFirstFileA
FindResourceA
GetACP
GetCommandLineA
GetCurrentProcessId
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
HeapCreate
IsBadStringPtrA
LoadLibraryA
MultiByteToWideChar
RtlUnwind
SetEnvironmentVariableA
SetLastError
SetUnhandledExceptionFilter
lstrcmpiA
wcscat
__p__commode
_wcsicmp
fwprintf
wcscmp
strspn
LoadIconA
PostMessageA
CloseClipboard
VarBstrCat
SysStringLen
SetErrorInfo
SafeArrayDestroy
SafeArrayAllocData
SafeArrayAccessData
OleTranslateColor
OleLoadPicturePath
OleIconToCursor
GetErrorInfo
ClearCustData
ChrCmpIA
PathBuildRootA
PathCombineA
PathFindOnPathA
PathGetCharTypeA
PathGetDriveNumberA
SHDeleteEmptyKeyA
SHDeleteValueA
SHOpenRegStreamA
GetCaptureDeviceFormat
UpdateFromAppChange
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ