DSFEWFEWFWEFEWFWEF
FEWFV
FSTGEHG
JHKKYTTRHRRGGRGGR
MEDDVREFWFtaGnDD
SADASDHFD
ServiceCrtMain
TTWEREWRWEREWR
VDSFEWF
Static task
static1
Behavioral task
behavioral1
Sample
850a7e877d8e68188714ff5344f6fc15_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
850a7e877d8e68188714ff5344f6fc15_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
850a7e877d8e68188714ff5344f6fc15_JaffaCakes118
Size
228KB
MD5
850a7e877d8e68188714ff5344f6fc15
SHA1
aaee7385b2c836e9d3e14812807f911c2144a894
SHA256
92dbbe0eff3fe0082c3485b99e6a949d9c3747afa493a0a1e336829a7c1faafb
SHA512
591cedb54beaf563eadf2f587c3737692d284bed68ea77d9b36e0a777821d5f2b88b914f0ea6266601ccc34524b250a534e751654ec1df252e02a79992e6f07a
SSDEEP
3072:aK55Dxg5oMnR5kpTsYQQf0Lt5rHWl/U5HXLuC0oCE:H55y7nR57YLKnal/U5ato
Checks for missing Authenticode signature.
resource |
---|
850a7e877d8e68188714ff5344f6fc15_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualProtect
Sleep
GetModuleFileNameA
lstrcatA
GetProcessHeap
HeapAlloc
lstrlenA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetProcAddress
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
CloseHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
DSFEWFEWFWEFEWFWEF
FEWFV
FSTGEHG
JHKKYTTRHRRGGRGGR
MEDDVREFWFtaGnDD
SADASDHFD
ServiceCrtMain
TTWEREWRWEREWR
VDSFEWF
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ