cepafaboziw
dagobapigoso
kehovurinuj
oberasugukuc
osolayegaz
qicoqijibe
renepeqiz
sirozota
tunowebeg
uvojejovimeg
Static task
static1
Behavioral task
behavioral1
Sample
72fe841c6ee279091fee0bdc57a12761_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
72fe841c6ee279091fee0bdc57a12761_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
72fe841c6ee279091fee0bdc57a12761_JaffaCakes118
Size
564KB
MD5
72fe841c6ee279091fee0bdc57a12761
SHA1
f9c1a2b34cf94a79e92dcbead9746a22f3f54ab3
SHA256
e3f96358aefbc27d7b22f46cd353d102697bb9d42696ad44c5defbc19ab0a529
SHA512
192cc6f72dcd66a6322401c99e94feae254a078cabcdca573eaa9ed5c3f831185dc12e61d8d7a1a9faf258762cd4b234a5782d8bfeff02a18c450bbbe4af3953
SSDEEP
12288:w+D4cX30ISUh34uxfcNYWIbd52b+H4pVTWANA91dDP:9XNSUV4uxfcNYNzoBVt2tDP
Checks for missing Authenticode signature.
resource |
---|
72fe841c6ee279091fee0bdc57a12761_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
RtlUnwind
RaiseException
ExitProcess
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
InterlockedExchange
VirtualQuery
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
VirtualProtect
GetSystemInfo
cepafaboziw
dagobapigoso
kehovurinuj
oberasugukuc
osolayegaz
qicoqijibe
renepeqiz
sirozota
tunowebeg
uvojejovimeg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ