DrawTextExW_ME
OpenComponentLibraryOnMemEx
USetKBLangFromTypeMEUED
Static task
static1
Behavioral task
behavioral1
Sample
6832623ae0ce351ed77ca8d65fa8cc00_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6832623ae0ce351ed77ca8d65fa8cc00_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6832623ae0ce351ed77ca8d65fa8cc00_JaffaCakes118
Size
171KB
MD5
6832623ae0ce351ed77ca8d65fa8cc00
SHA1
0886f0eb16a8227b8b6a10ea3977cc9233d73abe
SHA256
9e9237fe6198c8136d3c9c33d953847947ed778c7295c7655abe1e09cd362001
SHA512
47c6d16f9ec6ad4dcfa828df1c364aaa256f0947c5ed1755127dae355a769bdc89a2e1c0cce33b939021ca668a24dcc8bb0142cdf17d0e344903a4fe245033e6
SSDEEP
3072:lR7rR/mm+CzE7pjcE2PIvhEca8JGkR94agf95vuWQETJ:/x/ro1EuhFaGGkj4Hf9ln
Checks for missing Authenticode signature.
resource |
---|
6832623ae0ce351ed77ca8d65fa8cc00_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DuplicateHandle
ExitProcess
FindResourceA
FreeLibrary
GetACP
GetCommandLineA
GetEnvironmentStringsW
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetStartupInfoA
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapCreate
LoadResource
LockResource
MultiByteToWideChar
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateThread
lstrcmpA
lstrlenW
wcslen
__set_app_type
free
realloc
strpbrk
time
wcscmp
_cexit
wcscpy
UnionRect
TrackPopupMenu
InvalidateRgn
GetSysColor
GetDesktopWindow
CheckMenuRadioItem
RevokeActiveObject
SafeArrayAllocDescriptor
SetErrorInfo
SysReAllocString
ClearCustData
SHQueryInfoKeyA
SHSetValueA
StrStrA
PathGetDriveNumberA
DrawTextExW_ME
OpenComponentLibraryOnMemEx
USetKBLangFromTypeMEUED
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ