ComPlusMigrate
HrInitUCScribe
UGetCurrentKBLidMEUED
Static task
static1
Behavioral task
behavioral1
Sample
82a3787ef5aae2ebd47733e5f622b319_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
82a3787ef5aae2ebd47733e5f622b319_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
82a3787ef5aae2ebd47733e5f622b319_JaffaCakes118
Size
162KB
MD5
82a3787ef5aae2ebd47733e5f622b319
SHA1
f6e1546365c6a2395c4ec4f9f484484796ce6240
SHA256
fdbcfd2228cda74f4160ed2e5265117d01a3b2769a48fd8e3e267f13ed6b10ef
SHA512
5c61b1724f545220d9a2dd04a40aecea0959ba1bd2be6fe050560e7fb71c968c962955b5b240e2faa8fed4bca493e9aeb6eddfb2da03a848ca079b3eb08fe08c
SSDEEP
3072:q6AH79FcBes69kha1SVCR/cs2OZY+x13RXMz/jW/7YfcTxXAxe9Rfhw:3w79mssBak1s2q/3RXaC/39Ie
Checks for missing Authenticode signature.
resource |
---|
82a3787ef5aae2ebd47733e5f622b319_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
ExitProcess
FindResourceA
GetACP
GetCommandLineA
GetFileType
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
HeapCreate
LeaveCriticalSection
LoadResource
LockResource
MultiByteToWideChar
ResetEvent
ResumeThread
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
lstrlenA
strpbrk
swscanf
wcscpy
_exit
GetMessageA
GetWindowPlacement
UpdateWindow
DestroyIcon
SafeArrayAllocDescriptor
SafeArrayAccessData
SysFreeString
SHOpenRegStreamA
SHEnumKeyExA
SHSetValueA
PathGetCharTypeA
PathFindOnPathA
PathFileExistsA
StrChrA
StrToIntA
SHDeleteEmptyKeyA
ComPlusMigrate
HrInitUCScribe
UGetCurrentKBLidMEUED
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ