Install
MyNewFun
wintest
Static task
static1
Behavioral task
behavioral1
Sample
ab92cf35704c29773465a6568f8d7afc_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ab92cf35704c29773465a6568f8d7afc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ab92cf35704c29773465a6568f8d7afc_JaffaCakes118
Size
52KB
MD5
ab92cf35704c29773465a6568f8d7afc
SHA1
1ed4a28dfc5eb0e68e0557a63a5897312a570563
SHA256
128c5a814adfb211a74a7c266c1ca19e7767821301e3c38417474f7927d2f7e8
SHA512
5ca069c1206215c641853d61c9c5dc8cb97ccba686f13141918e0ca0ca128e7c90211a916370562df005f2c284108f8b336526206436042a6843d6c9d16e994a
SSDEEP
1536:a3idBevKuP4LCb/YiLZY9My7ye6Us9F9EH:aydBeCubb/YiWZ7yeTs7+H
Checks for missing Authenticode signature.
resource |
---|
ab92cf35704c29773465a6568f8d7afc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
BlockInput
GetDIBits
LsaFreeMemory
SHGetSpecialFolderPathA
_strnicmp
waveOutUnprepareHeader
WSAStartup
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
ImmReleaseContext
InternetReadFile
ICSeqCompressFrame
WTSFreeMemory
CreateEnvironmentBlock
EnumProcessModules
Install
MyNewFun
wintest
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE