a
b
c
Static task
static1
Behavioral task
behavioral1
Sample
88880d6ed7b2a9211ca28e135aeb5a18_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
88880d6ed7b2a9211ca28e135aeb5a18_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
88880d6ed7b2a9211ca28e135aeb5a18_JaffaCakes118
Size
17KB
MD5
88880d6ed7b2a9211ca28e135aeb5a18
SHA1
328f5c917e1f340abc6fe39c4915df367d83b6fd
SHA256
23e398660520a26a45fa36ea93526e87bca10d9265c6cc30aa3172630abd3f81
SHA512
2eecf24818b2fbd4b1e18aa270f801859257c097bd1d5ac96ac55c9fbbd4e632fa68fbea4773b9a4dfa52750ce073b7216bd50308f3be4606e30fae96074b8c8
SSDEEP
384:8vBPlAYdEJVbKfd+dmKkkmZW/p9c8yLrZIBdFUOUGvV+R:mB90JhKF+ujW9cFrZIBdyFG0R
Checks for missing Authenticode signature.
resource |
---|
88880d6ed7b2a9211ca28e135aeb5a18_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ReadFile
lstrcatA
MultiByteToWideChar
GetProcAddress
GlobalFree
GetTempFileNameA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetTempPathA
lstrcpyA
CreateEventA
RtlUnwind
GlobalAlloc
WriteFile
GetProcessHeap
GetTickCount
HeapFree
HeapAlloc
lstrlenA
GetThreadLocale
GetSystemDefaultLCID
GetUserDefaultLCID
lstrcpynA
HeapReAlloc
SetFilePointer
lstrcmpA
CreateFileA
InterlockedExchange
GetLastError
VirtualQuery
SetDlgItemTextA
CallWindowProcA
EnableWindow
SetWindowTextA
IsWindowVisible
DestroyWindow
GetWindowRect
GetFocus
wsprintfA
GetClientRect
SendMessageA
RegisterWindowMessageA
SetWindowLongA
MessageBoxA
GetWindowLongA
GetDesktopWindow
GetKeyboardLayoutList
GetDlgItem
ShowWindow
CreateWindowExW
RegQueryValueExA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegSetValueExA
HttpOpenRequestA
InternetSetFilePointer
FindCloseUrlCache
InternetOpenA
InternetCloseHandle
InternetConnectA
a
b
c
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ