EcKhPWU
LnpVfR
QSwtjLQ
DsNCWYSyR
MwIFB
Static task
static1
Behavioral task
behavioral1
Sample
023f2f0d888421f919b5c1e2364921d6_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
023f2f0d888421f919b5c1e2364921d6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
023f2f0d888421f919b5c1e2364921d6_JaffaCakes118
Size
68KB
MD5
023f2f0d888421f919b5c1e2364921d6
SHA1
2dda26f4f30c780430f3efa289f56db1c01925c4
SHA256
1f6e38c7c700fb600b7b8da44d26df4dff47446d30f24721afe31a5c921aa73f
SHA512
eee6c42e390b0a139ba23486819b712d4cb61d02f096a9f759e69527ddc02cc95c18dd32b394edd12b173c7d0f637569e366b601e19150d3028792cbf2b42afd
SSDEEP
1536:dX5nC2qeJHSDBpvlVYpS5YZhUysLjOiqbhED:jC2joBlVx5WWjOiqbhE
Checks for missing Authenticode signature.
resource |
---|
023f2f0d888421f919b5c1e2364921d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OpenProcessToken
OpenProcessToken
RegSetValueExA
AdjustTokenPrivileges
RegOpenKeyW
RegEnumKeyExW
SelectObject
BitBlt
BitBlt
GetDeviceCaps
GetStockObject
GetDeviceCaps
ExtTextOutW
GetDC
GetMessageW
GetMessageW
GetMessageW
GetSystemMenu
GetDC
GetDlgItem
LoadStringW
GetMessageW
CreateWindowExW
lstrlenW
GetTickCount
GetModuleHandleA
VirtualAlloc
SetUnhandledExceptionFilter
ExitProcess
GetCommandLineW
SHGetFolderPathW
ExtractIconW
SHGetFolderPathW
SHGetMalloc
DragQueryFileW
ExtractIconW
SHGetFolderPathW
EcKhPWU
LnpVfR
QSwtjLQ
DsNCWYSyR
MwIFB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ