ManagerShortCut
aux_EnableSearchBar
Static task
static1
Behavioral task
behavioral1
Sample
623a1288549f4c2705e499bc2904f535_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
623a1288549f4c2705e499bc2904f535_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
623a1288549f4c2705e499bc2904f535_JaffaCakes118
Size
49KB
MD5
623a1288549f4c2705e499bc2904f535
SHA1
2bf7a733348bcbbd4b06c14683911407d0933d01
SHA256
430bcaf71f8d4560a54e067621009f4978fafdf4bb104f8a0c8f38794258cfd7
SHA512
23956febb51fc641fd782c5d6def0873f5af255720433d06ebab61389f9aa994dd883d7b681d0e52ae99fa0ffe0a287fbcf1f573036e81480506943c99ff5a46
SSDEEP
768:jnFaNwUSpzswvxybz1o9QXeJzZzLzVVtGC:jnFkBezswveZouqzZzLzVVtGC
Checks for missing Authenticode signature.
resource |
---|
623a1288549f4c2705e499bc2904f535_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
MultiByteToWideChar
GetSystemDirectoryA
GetShortPathNameA
GetSystemDefaultLangID
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
RtlUnwind
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
SHGetSpecialFolderPathA
CoCreateInstance
CoInitialize
ManagerShortCut
aux_EnableSearchBar
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ