Wupqpgt
Nceqiadgt
Jwauikqicen
CreateDpnlwwrlw
ReadXitgure
IsUckybmecabf
CreateOudqiycfo
WriteAbdmedhm
Static task
static1
Behavioral task
behavioral1
Sample
8bc09023385f6ec33a29188f34e74b64_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8bc09023385f6ec33a29188f34e74b64_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8bc09023385f6ec33a29188f34e74b64_JaffaCakes118
Size
152KB
MD5
8bc09023385f6ec33a29188f34e74b64
SHA1
158521d2aab032a51eb72005a2f89f1256254bfb
SHA256
484f9f9ce8ae82e75dd70c749ddc6507121033f4616969617d0d93603ef0260a
SHA512
ee2f24572ede947ddcaf90db4417fdf6981ecfce65a46b451f20cc8db7cf9d84b1024db369284e25cf051d69cce1981ea670b78df7e734012cdbf3602ec804ab
SSDEEP
3072:ZAfNRDCQm11BziWo+MMpwgMnRhKkjEWDy+ydgYBrW:ZAfvDv+YWhNOgMnRhPAEgdZr
Checks for missing Authenticode signature.
resource |
---|
8bc09023385f6ec33a29188f34e74b64_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetConsoleAliasesLengthW
GetEnvironmentStringsA
Module32Next
GetLogicalDriveStringsA
SetFileAttributesA
RaiseException
VirtualAllocEx
GetFileTime
VirtualUnlock
OpenProcess
SetEvent
GetProcessTimes
ResetEvent
FindNextChangeNotification
IsValidCodePage
ReleaseSemaphore
GetTempPathA
IsValidLanguageGroup
IsBadHugeWritePtr
DeleteTimerQueueTimer
LocalFlags
CopyFileExW
SetThreadIdealProcessor
ReadConsoleOutputA
RaiseException
SetProcessShutdownParameters
GetConsoleWindow
GetWindowsDirectoryA
SetVolumeLabelA
FtpRemoveDirectoryW
InternetUnlockRequestFile
InternetQueryDataAvailable
ResumeSuspendedDownload
InternetGetConnectedStateExA
FtpSetCurrentDirectoryW
FtpSetCurrentDirectoryW
InternetCrackUrlA
Wupqpgt
Nceqiadgt
Jwauikqicen
CreateDpnlwwrlw
ReadXitgure
IsUckybmecabf
CreateOudqiycfo
WriteAbdmedhm
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ