kmpugptyz
xseggjhzbcrdf
xznrxlwd
Static task
static1
Behavioral task
behavioral1
Sample
acd3140660a84e64cfce4fe992e1a827_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
acd3140660a84e64cfce4fe992e1a827_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
acd3140660a84e64cfce4fe992e1a827_JaffaCakes118
Size
118KB
MD5
acd3140660a84e64cfce4fe992e1a827
SHA1
7d80468004c53dbd3aeaf2105b9b2c2e5ea1550e
SHA256
3131db0483316812d0ab83afff38a6217e02a98ff2444c25ac02ec9677cbdd46
SHA512
e2ce17df17e9edbc0f203de9a17e20b34ec1caa7b410935772ff1e424a35f18cc2fd7d4ce3b22df35a56947180017c1fa2d61b8d1618447ffa7796c3e62d3d79
SSDEEP
1536:xj4P8to5ZkxSHrC8unb58BlX2RhdV0TJHY6eCkiMr9r72/tBRkDKKkznRvS3NYsu:xjZJxSLWnb6x4kJHY69ei0mRebk7T
Checks for missing Authenticode signature.
resource |
---|
acd3140660a84e64cfce4fe992e1a827_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapAlloc
GetProcessHeap
VirtualAlloc
lstrcmpiA
GetCurrentProcess
LoadLibraryA
IsBadReadPtr
GetProcAddress
SizeofResource
CancelTimerQueueTimer
AttachConsole
CompareStringW
TerminateProcess
EnumResourceTypesW
SetPropA
IsCharLowerA
RedrawWindow
ExtFloodFill
EnumObjects
CombineTransform
LsaFreeMemory
GetServiceDisplayNameA
kmpugptyz
xseggjhzbcrdf
xznrxlwd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ