kkk
lll
Static task
static1
Behavioral task
behavioral1
Sample
a3ab2e4df1d740e8af1106734afe3050_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a3ab2e4df1d740e8af1106734afe3050_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a3ab2e4df1d740e8af1106734afe3050_JaffaCakes118
Size
40KB
MD5
a3ab2e4df1d740e8af1106734afe3050
SHA1
932f8e6b6e373f8d36461e86cb66c9325f818e04
SHA256
68ef7c9462804040a2e878bd1ff94a5403a8a5d5b460e3c68d5a115b51404074
SHA512
5d4a12086317989ba822e6bb42a5d080ea1fb66c131b9d2a4ef101f6cb467d1867411b21db26ea160c6082271541dfac4bea43134dfd8e2ab5ac6b4632e52861
SSDEEP
384:QgkkljT8yRUtgk7MpigVXDTb/+3ot+fMUFp8KXEyYycSzPgWYXiWAtsZgTjE:QgTHZpigVXDTbW3ot+flFxcgPwiNsZgM
Checks for missing Authenticode signature.
resource |
---|
a3ab2e4df1d740e8af1106734afe3050_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
CreateMutexA
GetCurrentProcessId
CreateThread
VirtualAlloc
ReadProcessMemory
GlobalLock
GlobalAlloc
CreateProcessA
GetModuleFileNameA
GetPrivateProfileStringA
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
GlobalUnlock
IsBadReadPtr
InitializeCriticalSection
VirtualProtectEx
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
SetThreadContext
OpenThread
SetUnhandledExceptionFilter
GetCommandLineA
GetCurrentThreadId
ReadFile
DeleteFileA
GetTempPathA
CreateFileA
WriteFile
CloseHandle
VirtualProtect
GetCurrentProcess
TerminateProcess
TerminateThread
Sleep
GetModuleHandleA
ExitProcess
GetProcAddress
CallNextHookEx
GetWindowTextA
GetWindowThreadProcessId
_strupr
_stricmp
_strcmpi
_strlwr
strcpy
sprintf
strlen
memcpy
strcat
memset
??2@YAPAXI@Z
atoi
??3@YAXPAX@Z
strstr
strncpy
strchr
fclose
fread
fopen
strcmp
wcslen
strrchr
__CxxFrameHandler
kkk
lll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ