cogipuroye
hirisejip
icarekoyij
ihoxeyohu
jilayosop
silamifemi
ufokoduliy
yagovanuru
yaqokekiz
yicasega
Static task
static1
Behavioral task
behavioral1
Sample
612523d73cf127eeb2c2b08306bd6282_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
612523d73cf127eeb2c2b08306bd6282_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
612523d73cf127eeb2c2b08306bd6282_JaffaCakes118
Size
564KB
MD5
612523d73cf127eeb2c2b08306bd6282
SHA1
b59da1ac81ac353ccb5c94c46a12d06b9812d493
SHA256
6f14ed8554a863d20f288474f63bf5290ae48b100f725da9bc0b9719f85d5180
SHA512
050605d2abc378cf94d06b3bd5c652821a0cd1b1f033476e01f433819303718c2b5092a13d24622e476771373a9154341527f651bc42b515c2f10ccb22f16336
SSDEEP
12288:TZyWHOUmh9zRr/0edsx8/DWIOQFaOmlafStK:kWHO7Ltrux8/DttFEa6
Checks for missing Authenticode signature.
resource |
---|
612523d73cf127eeb2c2b08306bd6282_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
InterlockedExchange
VirtualQuery
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
cogipuroye
hirisejip
icarekoyij
ihoxeyohu
jilayosop
silamifemi
ufokoduliy
yagovanuru
yaqokekiz
yicasega
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ