HXqjXM
SZoMsHD
YrTUqvjZS
kjwYtEQUs
qatDaZJBTIaR
Static task
static1
Behavioral task
behavioral1
Sample
a0489c80e6a36347e449e591bfa62bf2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a0489c80e6a36347e449e591bfa62bf2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a0489c80e6a36347e449e591bfa62bf2_JaffaCakes118
Size
80KB
MD5
a0489c80e6a36347e449e591bfa62bf2
SHA1
6e3395413a456cfbedcb9687b6a9c406feb72cdb
SHA256
c562238b6a9fb49d7c962ad3bd77c3ed712d62aa265158cc905de48a96097672
SHA512
12698f2cb01348e8d417433abdbaf53742d41d85ddd91845bcd8c63253024d6e2af011f88c8b2e4b21d2a1ee8629705553de9fa0a34dc4ee97e2470df485877c
SSDEEP
1536:I3R/rgYRQbwz9o4qqTwId63Jph9n5x1gytoRYb:eTvaboVwIc3JXfx1gJ
Checks for missing Authenticode signature.
resource |
---|
a0489c80e6a36347e449e591bfa62bf2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_except_handler3
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
RtlUnwind
SystemTimeToFileTime
SetEvent
GetVolumeInformationA
GetLocaleInfoA
GetTickCount
ReleaseMutex
MoveFileExA
GetWindowsDirectoryA
WritePrivateProfileStringA
MoveFileA
GetSystemTime
GetSystemDirectoryA
lstrcmpiA
lstrcmpA
GetVersionExA
CreateEventA
VirtualFree
ResumeThread
TerminateProcess
GlobalFree
GetThreadContext
VirtualQueryEx
LoadLibraryA
FreeLibrary
GlobalAlloc
VirtualAlloc
DeleteFileA
GetTempPathA
GetModuleFileNameA
GetLastError
CreateMutexA
lstrlenA
lstrcatA
lstrcpyA
WaitForSingleObject
GetProcAddress
GetModuleHandleA
ExitProcess
Sleep
GetVersion
CreateProcessA
CloseHandle
WriteFile
CreateFileA
lstrcpynA
GetProcessHeap
HeapFree
ReadFile
HeapAlloc
GetFileSize
OpenProcess
GetCurrentThreadId
GetTempFileNameA
GetWindowTextA
FindWindowExA
MessageBoxA
OpenInputDesktop
GetThreadDesktop
SetThreadDesktop
GetCursorPos
CloseDesktop
IsWindowVisible
ClientToScreen
GetFocus
EqualRect
InflateRect
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
CallNextHookEx
GetWindowThreadProcessId
SetWindowsHookExA
PostMessageA
FindWindowA
RegDeleteKeyA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
CreateProcessAsUserA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
SHDeleteKeyA
SHDeleteValueA
SHGetValueA
SHSetValueA
GetBkColor
GetBkMode
HXqjXM
SZoMsHD
YrTUqvjZS
kjwYtEQUs
qatDaZJBTIaR
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ