Ordinal1
Ordinal2
chk210104
Static task
static1
Behavioral task
behavioral1
Sample
aefb604f3f86e2ceac1abfc1d1e46114_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aefb604f3f86e2ceac1abfc1d1e46114_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aefb604f3f86e2ceac1abfc1d1e46114_JaffaCakes118
Size
52KB
MD5
aefb604f3f86e2ceac1abfc1d1e46114
SHA1
5c5840902b13cd195c69d041084dc7109d21700c
SHA256
2e4d1f3baa8cee78a06cfe4ea0b72b1d774111d5c414517e7fbc5799b6763bcf
SHA512
f6960e0d1f974f158de6a3501857e3a2166fd03273f2a3f3d8284f7991081d86b3fe221a6cc460a8480820f625d6553a2fa03e32054aab03dab12e1ec0f298f5
SSDEEP
768:rZhB/oEdYO1FjLTy7auKicxMuA8oVEQV8yjcXo9Qh:rvd68hurxcquAJEQVTooC
Checks for missing Authenticode signature.
resource |
---|
aefb604f3f86e2ceac1abfc1d1e46114_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTickCount
lstrlenA
lstrcpyA
GetCommandLineA
VirtualProtect
LoadLibraryA
lstrcmpiA
GetProcAddress
VirtualFree
VirtualAlloc
GetStringTypeW
GetStringTypeA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
RtlUnwind
wsprintfA
Ordinal1
Ordinal2
chk210104
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ