?SetMegaFunction@@YGPAXKKK@Z
?SetSuperFunction@@YGPAXKKKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
94ac403ceaadec4c18ae53f4607fa1a0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
94ac403ceaadec4c18ae53f4607fa1a0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
94ac403ceaadec4c18ae53f4607fa1a0_JaffaCakes118
Size
95KB
MD5
94ac403ceaadec4c18ae53f4607fa1a0
SHA1
c26f782576d7b48525337f83010cb6ee1052a68b
SHA256
2e01f1ec5c51f9b1d6b21444582f9ce2afcb3bb150e3024bbf5b562adc3f7da1
SHA512
df351742f0b8ec7475dec78fa49b7f514d4dfc662bbd55bf428168bab007b249b9d40d3dcb9f3530a94de42862ac5df1f9f6b435b3d27346d871fa04e90f587d
SSDEEP
1536:RK7HWS65kBhWby0/tZ2ReTXYvs/jr+j9XALYrQEXaebRtn:4yq6dFQon/+j9t7XtbRZ
Checks for missing Authenticode signature.
resource |
---|
94ac403ceaadec4c18ae53f4607fa1a0_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetOpenA
InternetOpenUrlA
CompareStringA
CloseHandle
HeapAlloc
GetProcessHeap
GetCurrentProcess
HeapFree
WaitForSingleObject
WriteFile
OpenProcess
LoadLibraryA
TerminateThread
ReadProcessMemory
HeapCreate
ReadFile
GlobalFree
OpenThread
MoveFileA
GetExitCodeThread
GetCurrentThreadId
WriteProcessMemory
SuspendThread
ReleaseSemaphore
CreateSemaphoreA
GlobalAlloc
GetActiveWindow
DrawTextA
MoveWindow
ModifyMenuA
UpdateWindow
PostMessageA
ShowWindow
InvalidateRect
SetWindowLongA
GetMenu
GetForegroundWindow
SendMessageA
DrawIcon
GetWindowInfo
LoadIconA
GetWindowRect
GetDC
ReleaseDC
FindWindowA
BitBlt
LineTo
SelectObject
DeleteDC
CreateCompatibleDC
memset
?SetMegaFunction@@YGPAXKKK@Z
?SetSuperFunction@@YGPAXKKKK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ