Fny
Fzm
Gye
Jaj
Mfk
Mnc
Qwh
Tqp
Vam
Vgv
Xbn
Xqd
Ygl
Static task
static1
Behavioral task
behavioral1
Sample
ab7c52ad0c09a37bcffba5f22ac789ab_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ab7c52ad0c09a37bcffba5f22ac789ab_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ab7c52ad0c09a37bcffba5f22ac789ab_JaffaCakes118
Size
127KB
MD5
ab7c52ad0c09a37bcffba5f22ac789ab
SHA1
0c70bb3220e9217bfd17d0a0fafdc1f84dc52d05
SHA256
640b50c422b88a6c544a24e9998ad7ac87d73f594f218b7945cbb07bca70b85d
SHA512
5ac560808eb7909789dc5f523f542e5fd45c38267ab4c2e99c9256ab2ee32ff93e3c7b809d2e4023c59d3e0558568bf0f728cde6b9902d97125af1c119d26a14
SSDEEP
3072:RwV0MYefby6MmYOrApu1nld9C68ENJHka0KMMiU1m9:RK0yfbPHY013h8Evka0KNP
Checks for missing Authenticode signature.
resource |
---|
ab7c52ad0c09a37bcffba5f22ac789ab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
LoadTypeLib
ControlService
StartServiceA
OpenProcessToken
SetSecurityDescriptorDacl
QueryServiceStatus
WriteFmtUserTypeStg
GetRunningObjectTable
GetConvertStg
CoDisconnectObject
CreateDataAdviseHolder
CreateBindCtx
CoTaskMemAlloc
CoGetMalloc
CoGetClassObject
SetCursor
MessageBoxIndirectA
DrawIcon
DefDlgProcA
ShowOwnedPopups
SHGetFileInfoA
SHBindToParent
SHFileOperationA
PathFindExtensionA
PathCompactPathExA
PathCanonicalizeA
PathIsDirectoryA
PathQuoteSpacesA
PathUnquoteSpacesA
time
strstr
sprintf
memchr
rand
fflush
malloc
vsprintf
TlsSetValue
lstrcatA
lstrcpyA
RaiseException
LocalAlloc
GetDateFormatA
FreeResource
FlushFileBuffers
EnumResourceLanguagesA
ReadFile
Fny
Fzm
Gye
Jaj
Mfk
Mnc
Qwh
Tqp
Vam
Vgv
Xbn
Xqd
Ygl
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ