FirstType
HelpInfo
InputDescriptor
MethodDescriptor
OutputDescriptor
Process
ReleaseResources
Static task
static1
Behavioral task
behavioral1
Sample
a8a6ac4e17aaac8a1865607c9db1c990_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a8a6ac4e17aaac8a1865607c9db1c990_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a8a6ac4e17aaac8a1865607c9db1c990_JaffaCakes118
Size
30KB
MD5
a8a6ac4e17aaac8a1865607c9db1c990
SHA1
806e80fac0268e3c4551fe2f784f2e56a3e6e3f5
SHA256
55ee8d735f6bee794fcb752a2632a4b743346855ca08b3ff419b4b547383213a
SHA512
e480173ec0ea903677176cebedb15c4617dd761b346254b98a414082f7d3a1e9e61b0fd8acd92aa694667db9da56d4a15eee6d3df7a949ce61a180b9586386cf
SSDEEP
768:Fj7FJl5/ija+1IO1jB3L/zdYF76hdYhCK4vvjoRKE3q:NFJaj5LCFAYYKMiV3q
Checks for missing Authenticode signature.
resource |
---|
a8a6ac4e17aaac8a1865607c9db1c990_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
SysFreeString
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetKeyboardType
DestroyWindow
MessageBoxA
GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
VirtualQuery
GetStartupInfoA
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
FirstType
HelpInfo
InputDescriptor
MethodDescriptor
OutputDescriptor
Process
ReleaseResources
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ