fa
fc
Static task
static1
Behavioral task
behavioral1
Sample
8e3449f9b46e2f78622733085f819ca9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8e3449f9b46e2f78622733085f819ca9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8e3449f9b46e2f78622733085f819ca9_JaffaCakes118
Size
10KB
MD5
8e3449f9b46e2f78622733085f819ca9
SHA1
1fe17d28d541a98d0bd79103046651a7672a436f
SHA256
47caf5ef585c1cd9f11867f035e91e665441516f51e496fbd933f28015b8e8f1
SHA512
654b452c68ed50fb86313fe46743782345f8b3c18d95a41bd8c4b5a1533e04c47cd451fe05757869a62d66b786258a3f73ea1fdc2adfbbcb4ef4efc333a96202
SSDEEP
96:3WyGd9pqkTQnjI47J/73Xl/Zc7NfEHhpfK0S47UmGE/hafnN1z/cD5y70:3WyGd96jJZZcApfKkwmG33z/cFy7
Checks for missing Authenticode signature.
resource |
---|
8e3449f9b46e2f78622733085f819ca9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
Sleep
VirtualProtectEx
GlobalFree
ReadProcessMemory
WideCharToMultiByte
GlobalAlloc
IsBadReadPtr
GetPrivateProfileStringA
GetProcAddress
GetModuleHandleA
CreateThread
GetModuleFileNameA
GlobalLock
GetCurrentProcess
CallNextHookEx
SetWindowsHookExA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
_adjust_fdiv
malloc
_stricmp
_initterm
free
strcat
strrchr
??3@YAXPAX@Z
strcpy
??2@YAPAXI@Z
sprintf
strlen
strncpy
strchr
strstr
fclose
fread
fopen
memset
memcpy
strcmp
fa
fc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ