RemoveHeur
ScanHeur
Static task
static1
Behavioral task
behavioral1
Sample
ab3b9dceb71b52861ab7ed4e07c64692_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ab3b9dceb71b52861ab7ed4e07c64692_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ab3b9dceb71b52861ab7ed4e07c64692_JaffaCakes118
Size
56KB
MD5
ab3b9dceb71b52861ab7ed4e07c64692
SHA1
d328cc6a47d77b2cf0685cd75b55e77ea35a2674
SHA256
fdc2628848c7a3c54310737aa1b2651178de1aab8787869e71fa9847bbae9300
SHA512
b91e792380d58d04854ce3d9c52ba647fae4ddf6a506c23bfc2d6dfc1cc98aa48b9a683bc6e7e5a04790c01ab04d90fd5d2cc7d50b14984392acce5f1c55f7a5
SSDEEP
768:n9yD3+wErDLkTsOuzkmtxxhaYl8kDlot2p4jB+36H:PFrDLkTtIZtcmrot2Kr
Checks for missing Authenticode signature.
resource |
---|
ab3b9dceb71b52861ab7ed4e07c64692_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MoveFileExA
GetCompressedFileSizeA
FileTimeToDosDateTime
FindFirstFileA
FindNextFileA
FindClose
GetTickCount
GetLastError
Sleep
GetProcessHeap
HeapAlloc
HeapFree
GetWindowsDirectoryA
GetSystemDirectoryA
GetTempPathA
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
wsprintfA
OpenSCManagerA
DeleteService
QueryServiceStatus
EnumDependentServicesA
OpenServiceA
ControlService
CloseServiceHandle
RegCreateKeyExA
RegOpenKeyExA
RegEnumValueA
RegQueryValueExA
RegCloseKey
RegEnumKeyExA
RemoveHeur
ScanHeur
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ