DeleteSelf
wdof
wdon
Static task
static1
Behavioral task
behavioral1
Sample
5bfe21417e268f9d25ceffa524576538_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5bfe21417e268f9d25ceffa524576538_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5bfe21417e268f9d25ceffa524576538_JaffaCakes118
Size
32KB
MD5
5bfe21417e268f9d25ceffa524576538
SHA1
b2aa8eeee6592119e65f392492ebd6561a395e6f
SHA256
af85a6cbe0b8b108bf49b5c9d2a7bcf43177bb38d7432b9bf23c7a9ee830ce75
SHA512
0260c4c140fe2102fcc04f7d3112a19e738245e51ae3b25e3439faf25ac254327c378c3f4f6ee073d9ac976b675fb66f3747b478d817ca542c4abb4f4fa9c0b0
SSDEEP
384:5+ATlQgw3DPxDJxZYWcC02drGAflcOHP8kJLOOYydLP59bOADBaYJ7Vu:MATlQzTxZYfC0iHfq47JCOYKp1aO7Vu
Checks for missing Authenticode signature.
resource |
---|
5bfe21417e268f9d25ceffa524576538_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
GlobalFree
GlobalUnlock
WriteFile
GlobalLock
GlobalAlloc
GetTempPathA
Process32Next
Process32First
CreateToolhelp32Snapshot
WritePrivateProfileStringA
CreateThread
GetPrivateProfileIntA
GetPrivateProfileStringA
WideCharToMultiByte
DeleteFileA
GetModuleHandleA
SetFileAttributesA
SizeofResource
LockResource
LoadResource
FindResourceA
CopyFileA
GetModuleFileNameA
VirtualProtect
GetCurrentProcessId
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
CreateFileA
ReadFile
GetFileSize
CloseHandle
GetTickCount
lstrcmpiA
lstrcpynA
lstrlenA
lstrcpyA
lstrcmpA
Sleep
ExitProcess
GetSystemDirectoryA
lstrcatA
LoadLibraryA
GetProcAddress
FreeLibrary
IsBadReadPtr
OutputDebugStringA
PostThreadMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
EnumWindows
GetWindowTextA
IsWindowVisible
ReleaseDC
GetDC
IsRectEmpty
GetWindowThreadProcessId
FindWindowExA
FindWindowA
PrintWindow
GetWindowInfo
SetForegroundWindow
ShowWindow
GetActiveWindow
IsIconic
GetSystemMetrics
CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
GetDeviceCaps
CreateDCA
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
InternetReadFile
HttpSendRequestA
InternetQueryDataAvailable
InternetConnectA
HttpAddRequestHeadersA
HttpSendRequestExA
InternetWriteFile
HttpEndRequestA
InternetOpenA
InternetCloseHandle
HttpOpenRequestA
??2@YAPAXI@Z
free
malloc
atoi
wcscmp
strstr
memmove
wcscpy
_beginthread
GdiplusShutdown
GdipSaveImageToFile
GdipLoadImageFromFile
GdipAlloc
GdipGetImageEncodersSize
GdipFree
GdipDisposeImage
GdipCloneImage
GdipGetImageEncoders
GdiplusStartup
DeleteSelf
wdof
wdon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ