Gbji
Whhxwtrxr
Static task
static1
Behavioral task
behavioral1
Sample
5ae78830982d2e05c5a2a983d8b52cd4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ae78830982d2e05c5a2a983d8b52cd4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ae78830982d2e05c5a2a983d8b52cd4_JaffaCakes118
Size
31KB
MD5
5ae78830982d2e05c5a2a983d8b52cd4
SHA1
e0296065deaa0a6b1a704545fe9ae066d1f213a6
SHA256
b622a95486a2ee4f07a5cec22526c1da8237c8ce8c479aebe8582b2dead39769
SHA512
f4484222e4027572cabb52cb1580533ec8d90891920540f3412df1ef58c2b0a18f9f72bbc965d973f88b3453a114d082fe3190721d20a5af9a2fe70a4655ebf1
SSDEEP
384:PJ+Yl/GE5y4rWkE3iYM4g/9ryJpSM3KA94/9a2sGo2zoL/lcLa5TT8suU4qsCIU+:sYRkur4gVmd3p94/9EwY4qpIfRtKk
Checks for missing Authenticode signature.
resource |
---|
5ae78830982d2e05c5a2a983d8b52cd4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
EnterCriticalSection
EnumResourceLanguagesA
ExitProcess
GetACP
GetCommandLineA
GetLocalTime
GetModuleHandleA
GetOEMCP
GetPrivateProfileStringA
GetStartupInfoA
HeapAlloc
LeaveCriticalSection
RtlUnwind
SetUnhandledExceptionFilter
TlsGetValue
VirtualFree
lstrcmpA
lstrcmpiA
lstrcpynA
IsCharUpperA
FillRect
EqualRect
EnableWindow
DrawTextA
DispatchMessageA
DeleteMenu
LoadBitmapA
CreateIconFromResource
CreateIcon
CreateDialogParamA
CreateDialogIndirectParamA
CreateDesktopW
CreateAcceleratorTableA
CharToOemBuffA
CharNextA
OemToCharA
CreateIconFromResourceEx
RegQueryValueA
RegOpenKeyExA
RegEnumKeyA
LsaClose
LsaCreateAccount
LsaCreateSecret
LsaDelete
LsaEnumerateAccounts
LsaEnumerateAccountsWithUserRight
LsaEnumeratePrivileges
LsaEnumeratePrivilegesOfAccount
LsaEnumerateTrustedDomains
LsaEnumerateTrustedDomainsEx
LsaFreeMemory
LsaGetQuotasForAccount
LsaGetRemoteUserName
LsaGetSystemAccessAccount
LsaGetUserName
LsaICLookupNames
LsaLookupNames
LsaLookupPrivilegeDisplayName
__vbaFileCloseAll
__vbaFailedFriend
__vbaExitProc
__vbaExitEachVar
__vbaCyVar
__vbaCyI4
__vbaCyI2
__vbaCyForNext
__vbaCyErrVar
__vbaCyAdd
__vbaCyAbs
__vbaCopyBytesZero
__vbaAryVar
__vbaAryCopy
DirectInputCreateA
DirectInputCreateW
Gbji
Whhxwtrxr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ