cool
feed
plem
Static task
static1
Behavioral task
behavioral1
Sample
8d1b6d50a2f43defde8d184299051556_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8d1b6d50a2f43defde8d184299051556_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8d1b6d50a2f43defde8d184299051556_JaffaCakes118
Size
19KB
MD5
8d1b6d50a2f43defde8d184299051556
SHA1
f0067d68aefbdeab3e1916b9b1622cee3c0bd7f0
SHA256
a29336e2fce7cfc62c6e0a71e0d125644bdced8668a8fe1173235b1cc2c97e55
SHA512
91582e94a309c1615ac6940c0bb1b87c87431419ff9a6ec4310684184144e65ca36d05309741ca8e055bdc67c9e7754b695a8352cc2edaa9b9acb3a214503f67
SSDEEP
384:09gizcV0xloemqq4SeK+mDYak4m0A7b0OXfEKpVQKOKB:09PzcVyloVPYakb0ezGKB
Checks for missing Authenticode signature.
resource |
---|
8d1b6d50a2f43defde8d184299051556_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
WideCharToMultiByte
CreateEventA
GetFileAttributesW
lstrcatA
MultiByteToWideChar
GetTempPathW
GetProcAddress
GlobalFree
LoadLibraryA
GetModuleHandleA
lstrcatW
CloseHandle
lstrcpyW
lstrcpyA
lstrcpynA
ReadFile
WriteFile
CompareStringA
RtlUnwind
CreateToolhelp32Snapshot
Process32First
SetFilePointer
lstrcmpA
CreateFileA
DestroyWindow
GetWindowRect
GetFocus
wsprintfA
GetClientRect
RegisterWindowMessageA
wsprintfW
SetWindowLongA
MessageBoxA
GetWindowLongA
CreateWindowExA
GetDlgItem
ShowWindow
CreateWindowExW
IsWindowVisible
SetWindowTextA
EnableWindow
CallWindowProcA
SetDlgItemTextA
SendMessageA
RegQueryValueExA
RegCloseKey
RegDeleteKeyW
cool
feed
plem
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ