Ordinal1
Ordinal2
fOrdchk138139
Static task
static1
Behavioral task
behavioral1
Sample
5c91f03bc48c615f1b49c20a15909aaa_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5c91f03bc48c615f1b49c20a15909aaa_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5c91f03bc48c615f1b49c20a15909aaa_JaffaCakes118
Size
52KB
MD5
5c91f03bc48c615f1b49c20a15909aaa
SHA1
06a8555263a2465b9b585445f02359b7ffa58799
SHA256
4312bbd7c761374b765dd2ef9ae208e4e6fd0ec61b8d874be9d8937e7e056cbd
SHA512
202706bb78064787dc63fc9a1d39b99d8d86b4b53802d5e81a4aa9afa6030128fc2a4c607b535025078a0c5a8f5b3197cd199f25f83a7d187466933afb39a9df
SSDEEP
1536:IIHX/iAieaKaOKa5iHuoNON/n3r4GowY3:taAieaKaOKaGNON/rpot
Checks for missing Authenticode signature.
resource |
---|
5c91f03bc48c615f1b49c20a15909aaa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
GetTickCount
DeleteFileA
lstrcatA
GetTempPathA
CreateEventA
lstrlenA
lstrcpyA
GetCommandLineA
VirtualProtect
LoadLibraryA
lstrcmpiA
GetProcAddress
VirtualFree
VirtualAlloc
GetStringTypeW
GetStringTypeA
GetVersion
HeapFree
GetLastError
CloseHandle
WriteFile
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
RtlUnwind
wsprintfA
Ordinal1
Ordinal2
fOrdchk138139
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ