DeleteSelf
wdof
wdon
Static task
static1
Behavioral task
behavioral1
Sample
5f39acfcbc0d0dc03df4f8d6496a92dd_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f39acfcbc0d0dc03df4f8d6496a92dd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5f39acfcbc0d0dc03df4f8d6496a92dd_JaffaCakes118
Size
32KB
MD5
5f39acfcbc0d0dc03df4f8d6496a92dd
SHA1
014a581073c68c061405ef355004e31c7f6ce5e9
SHA256
331fcb2906120d60c5478d1d1e80caae13cf81da1d243f5d7667c3f6adf298ce
SHA512
4d1b75a5266a056a339e6c677763d38f77fad890d2d5008df3473c5d63d6012835689ce52f5f2535f2a44f7b37afebc4e0368d0cb5d901409a49cb81b24608a1
SSDEEP
384:tXsRwAyXD/KZJx5YWmCG4bAShUGtHdBXprXJLOOYydLP59UOKnzDBak1fA4:hsRwAE8x5YtCrUyHn1JCOYdRz1aefA4
Checks for missing Authenticode signature.
resource |
---|
5f39acfcbc0d0dc03df4f8d6496a92dd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
GlobalFree
GlobalUnlock
WriteFile
GlobalLock
GlobalAlloc
GetTempPathA
Process32Next
Process32First
CreateToolhelp32Snapshot
WritePrivateProfileStringA
CreateThread
GetPrivateProfileIntA
GetPrivateProfileStringA
WideCharToMultiByte
DeleteFileA
GetModuleHandleA
SetFileAttributesA
SizeofResource
LockResource
LoadResource
FindResourceA
CopyFileA
GetModuleFileNameA
VirtualProtect
GetCurrentProcessId
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
CreateFileA
ReadFile
GetFileSize
CloseHandle
GetTickCount
lstrcmpiA
lstrcpynA
lstrlenA
lstrcpyA
lstrcmpA
Sleep
ExitProcess
GetSystemDirectoryA
lstrcatA
LoadLibraryA
GetProcAddress
FreeLibrary
IsBadReadPtr
OutputDebugStringA
PostThreadMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
EnumWindows
GetWindowTextA
IsWindowVisible
ReleaseDC
GetDC
IsRectEmpty
GetWindowThreadProcessId
FindWindowExA
FindWindowA
PrintWindow
GetWindowInfo
SetForegroundWindow
ShowWindow
GetActiveWindow
IsIconic
GetSystemMetrics
CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
GetDeviceCaps
CreateDCA
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
InternetReadFile
HttpSendRequestA
InternetQueryDataAvailable
InternetConnectA
HttpAddRequestHeadersA
HttpSendRequestExA
InternetWriteFile
HttpEndRequestA
InternetOpenA
InternetCloseHandle
HttpOpenRequestA
??2@YAPAXI@Z
free
malloc
atoi
wcscmp
strstr
memmove
wcscpy
_beginthread
GdiplusShutdown
GdipSaveImageToFile
GdipLoadImageFromFile
GdipAlloc
GdipGetImageEncodersSize
GdipFree
GdipDisposeImage
GdipCloneImage
GdipGetImageEncoders
GdiplusStartup
DeleteSelf
wdof
wdon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ