RbBvmvWyouuf
ZsdJTNcJ
nAnSwk
ruxGeUd
tZVNqGTPJyx
Static task
static1
Behavioral task
behavioral1
Sample
ac2a4aeb327c4c1386d9a89a12682e80_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ac2a4aeb327c4c1386d9a89a12682e80_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ac2a4aeb327c4c1386d9a89a12682e80_JaffaCakes118
Size
60KB
MD5
ac2a4aeb327c4c1386d9a89a12682e80
SHA1
9aed05a4d997038b9110b4106eb9d00520e1db1b
SHA256
fb2f39cac0552c11e437efb1dc7e8de1bc050d85efbe0578e362d475a82100b3
SHA512
a151e0f86afa4ca69ed71e5194ff871e9e80ca96ab6218ab87fc5c6edc3c937b4f1b70a48d8d05177c0c86e534fe68db97c1a07a1ec1144af88377a7bacbd9c6
SSDEEP
768:M/pheS5H+NwRYdeGaWFkmlg0mR5t/znyDjevxbRlvWiojBkGo6qCHbpbvM+hpDyB:MP+OYIrW2v5ZznyDqlRlvxG6spds68
Checks for missing Authenticode signature.
resource |
---|
ac2a4aeb327c4c1386d9a89a12682e80_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessA
CloseHandle
WriteFile
CreateFileA
lstrcpynA
CreateEventA
GetVersionExA
lstrcmpA
VirtualAlloc
VirtualFree
lstrcmpiA
FreeLibrary
LoadLibraryA
GetSystemDirectoryA
GetSystemTime
MoveFileA
GetCurrentThreadId
WritePrivateProfileStringA
GetWindowsDirectoryA
MoveFileExA
GetTempPathA
ReleaseMutex
GetTickCount
GetVersion
GetVolumeInformationA
SetEvent
GetFileSize
SystemTimeToFileTime
GetProcessHeap
HeapFree
ReadFile
HeapAlloc
GetTempFileNameA
DeleteFileA
GlobalAlloc
VirtualQueryEx
GetThreadContext
GlobalFree
TerminateProcess
ResumeThread
RtlUnwind
VirtualQuery
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
ExitProcess
WaitForSingleObject
CreateMutexA
OpenProcess
GetLastError
lstrcpyA
GetModuleHandleA
GetProcAddress
RaiseException
lstrlenA
lstrcatA
GetLocaleInfoA
GetModuleFileNameA
LoadIconA
DefWindowProcA
GetWindowTextA
CloseDesktop
SetThreadDesktop
GetThreadDesktop
OpenInputDesktop
MessageBoxA
LoadCursorA
FindWindowA
SetWindowsHookExA
PostMessageA
FindWindowExA
GetWindowThreadProcessId
GetFocus
EqualRect
GetCursorPos
ClientToScreen
IsWindowVisible
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
CallNextHookEx
wsprintfA
InflateRect
DispatchMessageA
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegEnumValueA
RegDeleteKeyA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
OpenProcessToken
CreateProcessAsUserA
SHDeleteKeyA
SHDeleteValueA
SHSetValueA
SHGetValueA
GetBkColor
GetBkMode
RbBvmvWyouuf
ZsdJTNcJ
nAnSwk
ruxGeUd
tZVNqGTPJyx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ