e
l
r
Static task
static1
Behavioral task
behavioral1
Sample
a29830b0ece072bc3979de8227fee8e9_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a29830b0ece072bc3979de8227fee8e9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a29830b0ece072bc3979de8227fee8e9_JaffaCakes118
Size
19KB
MD5
a29830b0ece072bc3979de8227fee8e9
SHA1
cebd1898f445a5bdc0c9b5244034c3f7a23367ff
SHA256
cdd3c4c1856ab845817355a9ff2c9cf627166e08879c4193add59b0976c9f4b3
SHA512
dae802258c808eeb31368779e13f83e02677908b55b8c0c3d4643b760649e2bdefd61b6324161f171bd1d61b4e6c2aad0e60a3b23869a368cb8e62a771d5d3d2
SSDEEP
384:vkzGqyaUpICtU67T7n5WSVbKEKyXCohsQc2ojdFxLdPvQ7:vkzGqEpIt6XtWShKsbOQcPjdLLhw
Checks for missing Authenticode signature.
resource |
---|
a29830b0ece072bc3979de8227fee8e9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ReadFile
lstrcatA
MultiByteToWideChar
GetProcAddress
GlobalFree
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetTempPathA
GetFileAttributesA
WideCharToMultiByte
RtlUnwind
GlobalAlloc
WriteFile
GetProcessHeap
GetTickCount
HeapFree
HeapAlloc
lstrcpyA
CreateEventA
SetFileAttributesA
GetThreadLocale
GetLastError
VirtualQuery
lstrcpynA
SetFilePointer
lstrcmpA
CreateFileA
InterlockedExchange
HeapReAlloc
GetSystemDefaultLCID
GetUserDefaultLCID
lstrlenA
SetDlgItemTextA
CallWindowProcA
EnableWindow
SetWindowTextA
IsWindowVisible
DestroyWindow
GetWindowRect
GetFocus
wsprintfA
GetClientRect
SendMessageA
RegisterWindowMessageA
wsprintfW
SetWindowLongA
MessageBoxA
AnyPopup
GetWindowLongA
CreateWindowExA
GetDlgItem
ShowWindow
CreateWindowExW
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
HttpOpenRequestA
InternetSetFilePointer
InternetOpenA
InternetCloseHandle
InternetConnectA
RestoreDC
e
l
r
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ