SzPtcUtl_Decode
SzPtcUtl_DecodeEx
SzPtcUtl_Encode
SzPtcUtl_EncodeEx
Static task
static1
Behavioral task
behavioral1
Sample
ac2e7ffa702e8e3eb117e4f95a447997_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ac2e7ffa702e8e3eb117e4f95a447997_JaffaCakes118
Size
176KB
MD5
ac2e7ffa702e8e3eb117e4f95a447997
SHA1
e54f17549937ec2403031e86feb32295d8a8ae3c
SHA256
cadcbe054bb2f96e9c2973bdb7df338b152eb32706eff3f5c16111d9601eb871
SHA512
982047fc9199fe8bcb923e8e0140c071fc2b55059a3d87b93a51295e5f4d8383aad4dec2fab99075263b0cfd0330958e76763d983d7503b2e85efe5836048eb7
SSDEEP
3072:IP7x3oS1stFbk0FEXcEJORDxlQ9dPeBxqEcrcN:IjutFbkWAcuyDDiPeWEcrcN
Checks for missing Authenticode signature.
resource |
---|
ac2e7ffa702e8e3eb117e4f95a447997_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapDestroy
lstrlenA
lstrcatA
VirtualFree
HeapFree
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
InterlockedDecrement
InterlockedIncrement
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
lstrcpyA
HeapCreate
GetOEMCP
GetACP
WriteFile
HeapAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
wsprintfA
SzPtcUtl_Decode
SzPtcUtl_DecodeEx
SzPtcUtl_Encode
SzPtcUtl_EncodeEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE