jjj
kkk
xxx
Behavioral task
behavioral1
Sample
84ef14389bb08d923180d53b41fe9257_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
84ef14389bb08d923180d53b41fe9257_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
84ef14389bb08d923180d53b41fe9257_JaffaCakes118
Size
67KB
MD5
84ef14389bb08d923180d53b41fe9257
SHA1
a5170be664a953e249f613a64e2f3e9b2353fe84
SHA256
a3a3a0ed498111663aed18a263fc68e7a9da99de0ca3ccb138964236e6908c56
SHA512
f6a817b169d48b4d707bb478e02903e7773639a62c068b213b7b29dd16d5d85b191a3e7ecb35d057fd4d7655bb4b1b4e12e367432ed19abf893c827346ab7eca
SSDEEP
768:/7CSFrzm/NewFicJqU4JzVpaHsAI75GRfovcsN:/7C+ri/NekicJcbpaHPe5GRfovcC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
84ef14389bb08d923180d53b41fe9257_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleA
GetFileAttributesA
GetTempPathA
HeapReAlloc
HeapAlloc
GetProcessHeap
MultiByteToWideChar
GetTickCount
lstrcatA
lstrcmpA
CloseHandle
SetFilePointer
WriteFile
CreateFileA
CreateEventA
GlobalAlloc
ReadFile
LoadLibraryExA
RtlUnwind
lstrcpynA
lstrcpyA
HeapFree
GlobalFree
RegCloseKey
RegOpenKeyA
RegQueryValueExA
MessageBoxA
SetDlgItemTextA
SetWindowLongA
RegisterWindowMessageA
SetWindowTextA
SendMessageA
GetDlgItem
GetFocus
ShowWindow
GetClientRect
GetWindowRect
CreateWindowExA
GetWindowLongA
CreateWindowExW
EnableWindow
DestroyWindow
CallWindowProcA
wsprintfA
IsWindow
GetForegroundWindow
GetDesktopWindow
IsWindowVisible
InternetConnectA
HttpOpenRequestA
InternetCloseHandle
jjj
kkk
xxx
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE