_ZN10CCmdEngine4gzipEPcS0_S0_
_ZN10CCmdEngine4par2EPcS0_S0_
_ZN10CCmdEngine5unrarEPcS0_S0_
Static task
static1
Behavioral task
behavioral1
Sample
613578a1c7b5a781eaa7aace67895b1f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
613578a1c7b5a781eaa7aace67895b1f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
613578a1c7b5a781eaa7aace67895b1f_JaffaCakes118
Size
107KB
MD5
613578a1c7b5a781eaa7aace67895b1f
SHA1
60b1d32cb63040f6a20b1af349db5a79bbe6e6ec
SHA256
1865899c0d21404b17514e25151acea9fd22aceafd4e28c2cf59c0f817d22ef5
SHA512
74976ef7a68b31827d148126be5f32aabb1068a2e211d07921131abf91210363f2948c9d0a4935e697b5051cb40b0fb549b14e0e95a224a0773281d88df3f3b2
SSDEEP
3072:F0nXOYfm1hHVsR1iBaOSa8nZ1C/VxlAqPwEPNWCpmP6Pr1FvIKEdTzuhOChC38uf:uXOem1hHVsR1iBaOSa8nZ1C/VxXPwEPY
Checks for missing Authenticode signature.
resource |
---|
613578a1c7b5a781eaa7aace67895b1f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AddAtomA
CloseHandle
CreatePipe
CreateProcessA
CreateSemaphoreA
CreateThread
FindAtomA
GetAtomNameA
GetExitCodeProcess
GetLastError
InterlockedDecrement
InterlockedIncrement
ReadFile
ReleaseSemaphore
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
__dllonexit
_assert
_errno
_iob
abort
fflush
fprintf
free
malloc
memchr
memcpy
memmove
memset
printf
puts
sprintf
sscanf
strchr
strcmp
strlen
strrchr
_ZN10CCmdEngine4gzipEPcS0_S0_
_ZN10CCmdEngine4par2EPcS0_S0_
_ZN10CCmdEngine5unrarEPcS0_S0_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ