AddReply
HandleEventHook
RegisterCallback
Static task
static1
Behavioral task
behavioral1
Sample
a33277fe6aa1c456279fe39e8b132df0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a33277fe6aa1c456279fe39e8b132df0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a33277fe6aa1c456279fe39e8b132df0_JaffaCakes118
Size
62KB
MD5
a33277fe6aa1c456279fe39e8b132df0
SHA1
cca2ca851cd180a63cec9294f23332bf73c93301
SHA256
f837a42fea5d77489a9dc36ebff005f6b34d76b17151648a80be6c310bf387e6
SHA512
b8cc5dd6b97cbe3e3d3b3982e573a28c3e4d0392df91e075034349794e054380ae767ed1bb444dff29b254bfa3995f75663540477ba56a79e994d31d31de60d0
SSDEEP
768:eMhv/cwCwCTUF++fjfIw079oKtTDju3o4Z8gMrX18Uvt3gqHMVFYYC8j0xPl:e6v/nC5f+fswDWneMrX18Uvt3qVzCZ
Checks for missing Authenticode signature.
resource |
---|
a33277fe6aa1c456279fe39e8b132df0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PeekMessageA
SendMessageA
DispatchMessageA
TranslateMessage
PostThreadMessageA
CoInitialize
CoCreateInstance
CoUninitialize
fwrite
_fdopen
_close
_open
sscanf
fseek
strncmp
rename
atoi
tolower
strstr
_strlwr
malloc
ftell
calloc
_initterm
_adjust_fdiv
printf
puts
strrchr
??3@YAXPAX@Z
??2@YAPAXI@Z
strncat
fgets
strchr
strncpy
atol
atof
qsort
fread
sprintf
fopen
_snprintf
fputs
fclose
_stricmp
_strnicmp
remove
free
LeaveCriticalSection
InitializeCriticalSection
GetFileSize
GetModuleFileNameA
GetCurrentDirectoryA
MoveFileA
GetModuleHandleA
GetProcAddress
EnterCriticalSection
SetFilePointer
ReadFile
SetFileAttributesA
MultiByteToWideChar
FindFirstFileA
RemoveDirectoryA
FindNextFileA
FindClose
CreateDirectoryA
CreateFileA
Sleep
ExitThread
GetFullPathNameA
DeleteFileA
CreateThread
WaitForSingleObject
CloseHandle
GetSystemTime
DeleteCriticalSection
AddReply
HandleEventHook
RegisterCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ