aab
all
allert2
fgllert
load
windows
Static task
static1
Behavioral task
behavioral1
Sample
8e8374ef0a445b6f709327b692a7510a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8e8374ef0a445b6f709327b692a7510a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8e8374ef0a445b6f709327b692a7510a_JaffaCakes118
Size
12KB
MD5
8e8374ef0a445b6f709327b692a7510a
SHA1
af89764c4e76cf60b48ce9c104aced7232682915
SHA256
24bead48c9bebba74e1801b34e3fbb535405d621375ea70643d7b3d0a85e47ca
SHA512
b53aa99ecc27783bedd9239371b868fc69c87e11d40424131e701d83fad3f55ffc714700e7d68ae3d2825e73f9d153807875738cc034dd39881dcdf459797ed1
SSDEEP
384:QBhc1spSm0O0mUqWlrqbbV+ujzlX+M7iF:eLn0O0mgmX8EOX
Checks for missing Authenticode signature.
resource |
---|
8e8374ef0a445b6f709327b692a7510a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegisterClassExA
SetWindowTextA
TranslateAcceleratorA
TranslateMessage
PostQuitMessage
LoadCursorA
SetTimer
LoadIconA
SetWindowPos
LoadAcceleratorsA
KillTimer
GetMessageA
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
lstrcpynA
WaitForSingleObject
TerminateProcess
RtlZeroMemory
LoadLibraryA
GetVersionExA
GetTempPathA
GetTempFileNameA
GetProcAddress
GetModuleFileNameA
CloseHandle
CreateThread
DeleteFileA
GetLongPathNameA
fwrite
strlen
strcpy
strcat
fseek
fread
fopen
fclose
atoi
_strlwr
PathFileExistsA
StrStrA
Shell_NotifyIconA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey
aab
all
allert2
fgllert
load
windows
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ