Sxccwoem
EndJxppvplscqb
Static task
static1
Behavioral task
behavioral1
Sample
97763d3e1a11b825ce1a5b94bd2c0ba3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
97763d3e1a11b825ce1a5b94bd2c0ba3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
97763d3e1a11b825ce1a5b94bd2c0ba3_JaffaCakes118
Size
64KB
MD5
97763d3e1a11b825ce1a5b94bd2c0ba3
SHA1
f8a56f799768ba880418857b281e2f687372a6de
SHA256
ca623b711ceacc8d6848ba5a19ebf075c8d2dc9a60289dc413e31c23b5c77aa4
SHA512
ccf11237509b37763e7de6acda7a5907a5e7446eaf32c2423c8db5e2a687aba741d00986efd091c95b020323cd22448d74f729c908dbe2b82384dc1027965a63
SSDEEP
1536:4CwTMQIUSgYjsuuXel7iHl2tQam6cUWq:FQIUSgSLwelOHLD1
Checks for missing Authenticode signature.
resource |
---|
97763d3e1a11b825ce1a5b94bd2c0ba3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LZInit
VirtualAllocEx
GetProcessHeap
GetCommandLineA
ExitProcess
GetThreadSelectorEntry
GetStringTypeExW
ClearCommBreak
HeapCreate
GetStartupInfoA
GetThreadPriority
FindNextVolumeMountPointA
IsDebuggerPresent
ExitProcess
GetProfileSectionA
DeleteTimerQueueEx
Module32First
LockSetForegroundWindow
DefFrameProcA
ChildWindowFromPointEx
MapDialogRect
PostThreadMessageA
AnimateWindow
GetMessageTime
RegisterWindowMessageW
SetWindowPos
UnregisterClassA
GetWinStationInfo
DlgDirSelectComboBoxExA
BuildReasonArray
LockWindowUpdate
SetWindowsHookExA
GetComboBoxInfo
ShowWindowAsync
MapDialogRect
LineTo
StretchBlt
PatBlt
DeleteObject
RegCloseKey
RegOpenKeyExA
Sxccwoem
EndJxppvplscqb
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ