cetebabumi
dogisicu
elesazikig
fuxabafof
pesolikena
uyiquzusad
yuvaqoxer
yuxozesom
zurawudef
Static task
static1
Behavioral task
behavioral1
Sample
89f1cb975b9c7a4077b6ab97061403ff_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
89f1cb975b9c7a4077b6ab97061403ff_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
89f1cb975b9c7a4077b6ab97061403ff_JaffaCakes118
Size
560KB
MD5
89f1cb975b9c7a4077b6ab97061403ff
SHA1
d9de11afbea9220173b1cbeff2fff7dea2c35902
SHA256
7692aa1ef44e0b925c18a9ad4bb44f5003e705f6df53c3f900d21579a72d854b
SHA512
e57f080d660a9cb78b48e4b86115b371e59a965a580d7a02a0cc37a6c0e443a0bd0a065e1884ea91def9cb490f07cce2f44de4579920341bd46d73e700a46852
SSDEEP
12288:d9JTFeEIyO4ZqwBI+/RJB5UW2oe+70C5AdUa/Q3beEHw1Hw:XActBPZJB5UWz70+Az/kbDw1H
Checks for missing Authenticode signature.
resource |
---|
89f1cb975b9c7a4077b6ab97061403ff_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
lstrlenA
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
InterlockedExchange
VirtualQuery
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
cetebabumi
dogisicu
elesazikig
fuxabafof
pesolikena
uyiquzusad
yuvaqoxer
yuxozesom
zurawudef
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ