CreateFactorys
GetFactory
ReleaseFactorys
Static task
static1
Behavioral task
behavioral1
Sample
8c953a846cddd7a714f89bb6d8340bae_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8c953a846cddd7a714f89bb6d8340bae_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8c953a846cddd7a714f89bb6d8340bae_JaffaCakes118
Size
12.0MB
MD5
8c953a846cddd7a714f89bb6d8340bae
SHA1
a08b3f3a9db5fe06f9408d947af777794f82cc5f
SHA256
cb35969f38d973a127f983b3b1b06bc3b8dbb30c87336c284f377974befe5e42
SHA512
63b7ecc61f4d2f7f5ea11f31331e8c8002fda2b0104eac57f574510b3cb1fc045166d06cfb6acf8ec2b02dfe5bcac7b61eabee1f770ba3dc0c128d3f050b2b31
SSDEEP
393216:WRksyoKxubqeDQ6h3ra94suCA5UhncfJnAhaL73bwz:DNDtesG3X1n+cfJu8K
Checks for missing Authenticode signature.
resource |
---|
8c953a846cddd7a714f89bb6d8340bae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SysFreeString
RegQueryValueExA
GetKeyboardType
ShellExecuteA
CreateFactorys
GetFactory
ReleaseFactorys
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE