QycxlbausdduXyeiHl
bjymcwxotzph
bpszx
cgmih
ejbqgujqXhNmdce
hkicjcc
iddntcjB
kfDxseJW
lalOLytDvUsik
pbdjustvyNdudVlYoA
rnkyfyrWxVl
sfzejHysvsp
tMccBib
wBsIxoLsx
yJItUbdyexsxLEzalme
yvO
zMerkl
Static task
static1
Behavioral task
behavioral1
Sample
8db8fe3b857b27cea3e3d44bc82951c9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8db8fe3b857b27cea3e3d44bc82951c9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8db8fe3b857b27cea3e3d44bc82951c9_JaffaCakes118
Size
423KB
MD5
8db8fe3b857b27cea3e3d44bc82951c9
SHA1
c11321915992626c59e07890b7c29af17dd45e26
SHA256
ccadd19973cb15f2d8842126bc8d60557101a1b998016cd11722a7390d4eed6b
SHA512
27d71c44d9ddeff4d25067b7d82177b30c3269f51cbd87f8876ed2c5155ccf94c47c906eb7061cc245efb349d37d32d17edda5fb7a629e04e8384ea54e0fca4b
SSDEEP
12288:v+cLJ2t2Vtu5CQrMOwPAUHnnW4xM4YKQm7rC3+HXwsN:vzehrsPdHnW4xMV9am+3P
Checks for missing Authenticode signature.
resource |
---|
8db8fe3b857b27cea3e3d44bc82951c9_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BuildCommDCBW
DeviceIoControl
DnsHostnameToComputerNameA
EnumDateFormatsW
EnumResourceLanguagesW
ExitProcess
FlushInstructionCache
FreeConsole
GetACP
GetCommandLineA
GetCurrencyFormatA
GetCurrentThread
GetMailslotInfo
GetProcessAffinityMask
HeapAlloc
IsValidLanguageGroup
OpenMutexA
RtlZeroMemory
SetCalendarInfoW
SetLastError
SetThreadLocale
SetUnhandledExceptionFilter
SetVolumeLabelA
VerLanguageNameA
VirtualAlloc
VirtualFree
WriteProfileSectionA
_lwrite
VerFindFileA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoA
RtlExpandEnvironmentStrings_U
NtFsControlFile
RtlNtStatusToDosError
RtlSetThreadPoolStartFunc
ZwCreateProcess
ZwDeleteFile
ZwDuplicateObject
RtlLookupElementGenericTable
RegisterGPNotification
EnterCriticalPolicySection
ExpandEnvironmentStringsForUserW
FreeGPOListW
GetAppliedGPOListW
CreateEnvironmentBlock
UnregisterGPNotification
DestroyEnvironmentBlock
LeaveCriticalPolicySection
GetProfilesDirectoryW
freopen
_mbctoupper
_initterm
_finite
_exit
IUnknown_Release_Proxy
float_from_ndr
double_from_ndr
RpcSsSetThreadHandle
RpcSmSetClientAllocFree
RpcServerUseAllProtseqsIfEx
RpcServerUseAllProtseqsIf
RpcServerUseAllProtseqsEx
RpcServerInqIf
RpcServerInqDefaultPrincNameA
RpcObjectSetInqFn
RpcMgmtInqIfIds
RpcCancelThread
RpcBindingToStringBindingA
RpcBindingInqAuthClientA
RpcAsyncInitializeHandle
CStdStubBuffer_IsIIDSupported
MIDL_wchar_strcpy
QycxlbausdduXyeiHl
bjymcwxotzph
bpszx
cgmih
ejbqgujqXhNmdce
hkicjcc
iddntcjB
kfDxseJW
lalOLytDvUsik
pbdjustvyNdudVlYoA
rnkyfyrWxVl
sfzejHysvsp
tMccBib
wBsIxoLsx
yJItUbdyexsxLEzalme
yvO
zMerkl
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ