DadosConfigA
DadosConfigB
DadosLink
DadosSMTP
Execut
ExecutMini
InfConfig
LogConfig
Static task
static1
Behavioral task
behavioral1
Sample
88561bff22ba844f08136de1b1540e37_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
88561bff22ba844f08136de1b1540e37_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
88561bff22ba844f08136de1b1540e37_JaffaCakes118
Size
347KB
MD5
88561bff22ba844f08136de1b1540e37
SHA1
95ff92149987f74700f0b70412142bdfba353d8c
SHA256
00db55932f7c2bed0082db1eec44464d0ef35ac66a4fa5937faad1933966de65
SHA512
a9df03f285e5047dcc4f5757613ea33e42a59c75d882b39153f681bd01528d3e9d924827df20c999d2caf1d3778c6eade837e88d8bba6223bcb576023c34d34b
SSDEEP
6144:LCk9FZ2CeoP7Py5p/O6EJV1rP7RxMGva579nh6XpwXjDSA9IYKSOITY:LF0H5lkLDtFa579nhUDiIYKShT
Checks for missing Authenticode signature.
resource |
---|
88561bff22ba844f08136de1b1540e37_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
SysFreeString
RegCloseKey
LoadStringW
GetVersionExW
GetVersion
GetStartupInfoA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
ShellExecuteW
DadosConfigA
DadosConfigB
DadosLink
DadosSMTP
Execut
ExecutMini
InfConfig
LogConfig
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ