RFQtkbsr
TTfwbkYGW
fJcWqPyDxaog
kHjLgXTS
zFcZMy
Static task
static1
Behavioral task
behavioral1
Sample
a5548c4433de9f010b6c6784a06a602d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5548c4433de9f010b6c6784a06a602d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a5548c4433de9f010b6c6784a06a602d_JaffaCakes118
Size
79KB
MD5
a5548c4433de9f010b6c6784a06a602d
SHA1
dc3c76f16df3fa0348c43fa7dff0f6fedf075bd0
SHA256
0dfb48e9477c6fc28962ef7b24ccaa84625b35f45bb85cfe564383ac3da5a1fb
SHA512
225116b16f6308e695108493b35b847be12ae313b1b59e88646405c97d943d9e2e9cbf2ba99919bd6bff9ac771ed6c9a0b4a5bf2420cd1831d699fd4f383e986
SSDEEP
1536:MORmRDIOWFw8mm1fpft6g3oMNmoOkKwtZWTB/kt:O2NrZlO4D
Checks for missing Authenticode signature.
resource |
---|
a5548c4433de9f010b6c6784a06a602d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_except_handler3
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
RtlUnwind
SystemTimeToFileTime
SetEvent
GetVolumeInformationA
GetLocaleInfoA
GetTickCount
ReleaseMutex
MoveFileExA
GetWindowsDirectoryA
WritePrivateProfileStringA
MoveFileA
GetSystemTime
GetSystemDirectoryA
lstrcmpiA
lstrcmpA
GetVersionExA
CreateEventA
VirtualFree
ResumeThread
TerminateProcess
GlobalFree
GetThreadContext
VirtualQueryEx
LoadLibraryA
FreeLibrary
GlobalAlloc
VirtualAlloc
DeleteFileA
GetTempPathA
GetModuleFileNameA
GetLastError
CreateMutexA
WaitForSingleObject
GetProcAddress
GetModuleHandleA
ExitProcess
Sleep
GetVersion
CreateProcessA
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrcpynA
lstrlenA
lstrcpyA
GetProcessHeap
HeapFree
ReadFile
HeapAlloc
GetFileSize
OpenProcess
GetCurrentThreadId
GetTempFileNameA
GetWindowTextA
FindWindowExA
MessageBoxA
OpenInputDesktop
GetThreadDesktop
SetThreadDesktop
ClientToScreen
CloseDesktop
GetCursorPos
EqualRect
InflateRect
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
CallNextHookEx
FindWindowA
GetWindowThreadProcessId
PostMessageA
GetFocus
IsWindowVisible
SetWindowsHookExA
RegDeleteKeyA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
CreateProcessAsUserA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
SHDeleteKeyA
SHDeleteValueA
SHGetValueA
SHSetValueA
GetBkMode
GetBkColor
RFQtkbsr
TTfwbkYGW
fJcWqPyDxaog
kHjLgXTS
zFcZMy
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ