aab
aal
allert2
fgllert
qoad
windows
Static task
static1
Behavioral task
behavioral1
Sample
5e96db7ec17e5c4720a938b89cc1e451_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e96db7ec17e5c4720a938b89cc1e451_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e96db7ec17e5c4720a938b89cc1e451_JaffaCakes118
Size
15KB
MD5
5e96db7ec17e5c4720a938b89cc1e451
SHA1
ab29d76fc6b632ab2b34c234b026c64fdbd7da17
SHA256
6c75bef97bb8580a7d116e9b979b455676bdebf989e3607dcdc7b2f8e7f9b6e4
SHA512
40f08c6c0abff9564aa393c61efe23db57d15e9b668bd5c1e001e637b7d29f8e6279d2739768a9966dd268b7a50faa578421887fc481e71e64370dcd48b047f2
SSDEEP
384:Yn2yvidcVskKkqjrw5cyoanXYkrVuqbbJ+ujzlm+M7idvu:PypvqjocanXYkBvXYEXPu
Checks for missing Authenticode signature.
resource |
---|
5e96db7ec17e5c4720a938b89cc1e451_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadIconA
PostQuitMessage
RegisterClassExA
LoadCursorA
SetWindowPos
SetWindowTextA
TranslateAcceleratorA
TranslateMessage
LoadAcceleratorsA
SetTimer
KillTimer
GetMessageA
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
wsprintfA
lstrcpynA
WritePrivateProfileStructA
WaitForSingleObject
TerminateProcess
RtlZeroMemory
LoadLibraryA
GetVersionExA
GetTempPathA
GetTempFileNameA
GetProcAddress
GetModuleFileNameW
ClearCommError
CloseHandle
CopyFileExA
CopyFileExW
CreateThread
DefineDosDeviceA
DeleteFileA
ExitProcess
GetLastError
GetLongPathNameA
GetModuleFileNameA
fscanf
strlen
strcpy
strcmp
strcat
fwrite
fseek
fread
fopen
fclose
atoi
_strlwr
_wfopen
PathFileExistsA
StrStrA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey
aab
aal
allert2
fgllert
qoad
windows
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ