Esyrbkja
Iismufg
Adsvmgvour
InitBxkdxxn
GetWgnumhtgtxf
Nitymsblb
Ixhntyscc
Fourjybdcs
Static task
static1
Behavioral task
behavioral1
Sample
8c2c4520b42f2fde467055f45ad5525c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8c2c4520b42f2fde467055f45ad5525c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8c2c4520b42f2fde467055f45ad5525c_JaffaCakes118
Size
64KB
MD5
8c2c4520b42f2fde467055f45ad5525c
SHA1
52cd69d67ea261be10de9f47c04ac9f912ea7154
SHA256
3d15f64f0e115cc1d956c7f0a06e346b891248a2f34b1656ed5d86f8318e7fc4
SHA512
6ed9b535210b4d56ec605fb89e903013cde86c78800b62ef98d606f3139562d248c0ff03ca5795e6f8f055e28876f3d887d61e914aa6a14189865a4cf142c46d
SSDEEP
1536:ku7DIhMsKw8J5Qmt9JIXkC1o78hB+S6O4oCTnD:TDIhBLMQUlC1o1HZoM
Checks for missing Authenticode signature.
resource |
---|
8c2c4520b42f2fde467055f45ad5525c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ReadConsoleInputA
FormatMessageA
GetPrivateProfileStringA
VirtualAllocEx
OpenProfileUserMapping
Process32Next
GetSystemWindowsDirectoryA
UnlockFile
GetProcessVersion
MoveFileExA
GetConsoleCharType
IsSystemResumeAutomatic
EnumUILanguagesA
GetFileAttributesA
HeapValidate
GetConsoleTitleA
SetEvent
OpenEventA
RemoveDirectoryA
RaiseException
TransmitCommChar
GetPriorityClass
ResetEvent
OpenFileMappingA
SetEndOfFile
GetDefaultCommConfigA
WaitForMultipleObjects
GetCurrentDirectoryA
IsDebuggerPresent
GlobalSize
IsBadStringPtrA
SetFileAttributesA
FtpSetCurrentDirectoryW
ResumeSuspendedDownload
InternetQueryDataAvailable
InternetGetConnectedStateExA
InternetCrackUrlA
FtpSetCurrentDirectoryW
FtpRemoveDirectoryW
InternetUnlockRequestFile
Esyrbkja
Iismufg
Adsvmgvour
InitBxkdxxn
GetWgnumhtgtxf
Nitymsblb
Ixhntyscc
Fourjybdcs
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ