Gsx
Hid
Nvf
Pcw
Shi
Sws
Viz
Wqw
Ydo
Ylv
Static task
static1
Behavioral task
behavioral1
Sample
8e2682fa11c9592fb7cfd048d02b93ec_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8e2682fa11c9592fb7cfd048d02b93ec_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8e2682fa11c9592fb7cfd048d02b93ec_JaffaCakes118
Size
295KB
MD5
8e2682fa11c9592fb7cfd048d02b93ec
SHA1
70d1d672edacf76c88d8a665a0a758202685adde
SHA256
184d7e10e57e3d6d8a1db78f866d4debc067c1104689f53379dfbc24929192ad
SHA512
6c865572b34a3bde1b5fd983250a32bdd37e1d7b5fa6e0cb93d4de2fd7b4e35d378ce1c7fa8a2a7e9be3ed98093261705901b1d322076ada95e3c41e60c6e452
SSDEEP
3072:xmkpmZS5cr2XdDh/voxIxl44cOjMwSSyTKMMiU1m9:z5DDZAqlJjZSHTKNP
Checks for missing Authenticode signature.
resource |
---|
8e2682fa11c9592fb7cfd048d02b93ec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
LoadTypeLib
CloseServiceHandle
CreateServiceA
DeleteService
InitializeSecurityDescriptor
OpenServiceA
QueryServiceStatus
SetSecurityDescriptorDacl
AdjustTokenPrivileges
CoCreateGuid
CLSIDFromProgID
CoRegisterClassObject
CoTaskMemAlloc
CreateDataAdviseHolder
OleGetClipboard
OleSetClipboard
ProgIDFromCLSID
RegisterDragDrop
WriteClassStm
CoGetClassObject
lstrcatA
UnmapViewOfFile
SetEndOfFile
LeaveCriticalSection
GetStartupInfoA
FlushFileBuffers
Gsx
Hid
Nvf
Pcw
Shi
Sws
Viz
Wqw
Ydo
Ylv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ