CWTHF
IEFYPTKLAQ
Static task
static1
Behavioral task
behavioral1
Sample
aaa79cd8ddf8a0fa0eb148c35299793d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
aaa79cd8ddf8a0fa0eb148c35299793d_JaffaCakes118
Size
99KB
MD5
aaa79cd8ddf8a0fa0eb148c35299793d
SHA1
87ee2a483f36151192e50db2a64b7f320d84d3f6
SHA256
11e146f119be7aa49ae862685558fbcb6d6131639f758f3629719116e2f3324b
SHA512
dd8f4907cef06f72fc8c411e09f137e4f10bc46042001e7d59cbf852961f124a66268f8571fd7b10de9ef30a078f0f933933f7f2b0bf4ecefe328fa72937ee50
SSDEEP
1536:qpYj01RIM39tWlzU2XGbfpbm5Kdxx0pxgxtWARIZ:qWj439tS4oCfp0K7xA8WwIZ
Checks for missing Authenticode signature.
resource |
---|
aaa79cd8ddf8a0fa0eb148c35299793d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
GetCommandLineA
GetCurrentThreadId
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RtlUnwind
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CWTHF
IEFYPTKLAQ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ