ipipwr
rewc
tretre
Static task
static1
Behavioral task
behavioral1
Sample
5fdf590c2f2a72c53b4257b148492386_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5fdf590c2f2a72c53b4257b148492386_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5fdf590c2f2a72c53b4257b148492386_JaffaCakes118
Size
44KB
MD5
5fdf590c2f2a72c53b4257b148492386
SHA1
76d1517939f6437496c564495ea3a78294dda137
SHA256
ee953465f53128648ca801f261c510fb6da2c7a839c027f49f8f929f45e99286
SHA512
77421a991362976c3484b29bce414502138fd45df116cdae164980889de63c1bc4f2369499f527fd4a327f2e22b0d2bc57821e95f14328dfc66fe79cea5ee6ea
SSDEEP
384:JYRS2XDNHYMTLScIyHffy2TjkhdhaJDrAxUXroCCkjsM3GVoxYJ/+R4YRibn70YE:JnupvLSebjkhHaJDJbakjXR4YRibn7W
Checks for missing Authenticode signature.
resource |
---|
5fdf590c2f2a72c53b4257b148492386_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentProcessId
GetTickCount
VirtualProtect
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
WriteFile
DeleteFileA
InitializeCriticalSection
VirtualProtectEx
GetPrivateProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
CreateMutexA
SetUnhandledExceptionFilter
SetThreadContext
OpenThread
MultiByteToWideChar
VirtualAlloc
GetCurrentThreadId
GetCurrentProcess
GetLastError
ExitProcess
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCommandLineA
IsBadReadPtr
TerminateThread
CreateThread
GetModuleHandleA
ReadProcessMemory
GetProcAddress
CallNextHookEx
GetWindowThreadProcessId
GetWindowTextA
_strcmpi
_stricmp
_strupr
_strlwr
??2@YAPAXI@Z
memcpy
strrchr
memset
sprintf
strcat
strcpy
strlen
rand
srand
strcmp
wcslen
strstr
??3@YAXPAX@Z
strncpy
strchr
__CxxFrameHandler
ipipwr
rewc
tretre
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ