cfawlwpl
yelghwutf
Static task
static1
Behavioral task
behavioral1
Sample
6fde281cdc5f514f1251d52893c4e676_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6fde281cdc5f514f1251d52893c4e676_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6fde281cdc5f514f1251d52893c4e676_JaffaCakes118
Size
39KB
MD5
6fde281cdc5f514f1251d52893c4e676
SHA1
87357e4999fe1c17310877940ffbf9a5cd5e6eb1
SHA256
8bb3a391dfc51597072dd985e585f958cb3c7d37c08ba0dc1d450595a8365b49
SHA512
331d70e4d75549519282ff48bd4012354ceb9f271121e833ee2ac433da17f044f42202cc1d71fb3fe996c3153bb1ca134f471d02f8cd3da8edd8b3a220d8c460
SSDEEP
768:nK+/hfqHsfgtSlkPT803f5AiM2SLiauvTVMdvdwr5K20:fZSH2gtHX3feR2SL4bSdwFb0
Checks for missing Authenticode signature.
resource |
---|
6fde281cdc5f514f1251d52893c4e676_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualFree
FindResourceA
SizeofResource
LoadResource
VirtualAlloc
LockResource
FindAtomA
GetModuleHandleA
AddAtomA
GetProcAddress
FreeResource
UnionRect
WinHelpA
UnregisterClassA
ValidateRgn
VkKeyScanA
CryptGetProvParam
RegEnumKeyExA
RegReplaceKeyA
CryptGetKeyParam
CryptGenKey
CryptSetHashParam
CryptHashSessionKey
CryptSetKeyParam
CryptExportKey
cfawlwpl
yelghwutf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ