aab
aal
allert2
fgllert
qoad
windows
Static task
static1
Behavioral task
behavioral1
Sample
8ac69e66124e217edb7a27f08e5b6982_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ac69e66124e217edb7a27f08e5b6982_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8ac69e66124e217edb7a27f08e5b6982_JaffaCakes118
Size
13KB
MD5
8ac69e66124e217edb7a27f08e5b6982
SHA1
81f1a1d65003c4913e34b80d0204197cb04fef10
SHA256
6e3f3e198f78b9ddd63e778f11d4f8aaf2ed4d35b96af495b1e85c3288b72f8b
SHA512
d78fc81895cd91eb51ee7bd1152c4d23e46537af3c52cb69716a703f54e9a6247a4b64516bfb4dfdc3f7f1bd49e18f209ffbacc8435f0344b852f3565f80ab02
SSDEEP
384:KcPj8MynZ3CuE5yoxkVuqbbV+ujzlX+M7i:/PjynNw9xEvX8EO
Checks for missing Authenticode signature.
resource |
---|
8ac69e66124e217edb7a27f08e5b6982_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PostQuitMessage
RegisterClassExA
LoadIconA
SetWindowPos
SetWindowTextA
TranslateAcceleratorA
TranslateMessage
LoadCursorA
SetTimer
LoadAcceleratorsA
KillTimer
GetMessageA
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
lstrcpynA
WritePrivateProfileStructA
WaitForSingleObject
TerminateProcess
RtlZeroMemory
LoadLibraryA
GetVersionExA
GetTempPathA
GetTempFileNameA
GetProcAddress
ClearCommError
CloseHandle
CopyFileExA
CopyFileExW
CreateThread
DefineDosDeviceA
DeleteFileA
GetLastError
GetLongPathNameA
GetModuleFileNameA
fread
strlen
strcpy
strcat
fwrite
fseek
fopen
fclose
atoi
_wfopen
_strlwr
PathFileExistsA
StrStrA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey
aab
aal
allert2
fgllert
qoad
windows
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ