ManagerShortCut
aux_EnableSearchBar
Static task
static1
Behavioral task
behavioral1
Sample
af29432a81ad328b42ab97570f98212b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
af29432a81ad328b42ab97570f98212b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
af29432a81ad328b42ab97570f98212b_JaffaCakes118
Size
48KB
MD5
af29432a81ad328b42ab97570f98212b
SHA1
2e8a9623337448bff13190b405c44c36caac75a1
SHA256
5b6da146fb3f3b83914be3109ddfdd30818acbf17ef3630e9ac3e7aeffd08322
SHA512
eac6ba3deed4e3a2f020365d2cf1620c5f4b8247e1335153f7871937542f7c596760bf20fa58f365413e973d2ea1279c19bea647550e0a13ace8eeebc680ab4f
SSDEEP
768:1nFaNwUSpzswvxybz1o9QXeJzZzLzVVtGY:1nFkBezswveZouqzZzLzVVtGY
Checks for missing Authenticode signature.
resource |
---|
af29432a81ad328b42ab97570f98212b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
MultiByteToWideChar
GetSystemDirectoryA
GetShortPathNameA
GetSystemDefaultLangID
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
RtlUnwind
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
SHGetSpecialFolderPathA
CoCreateInstance
CoInitialize
ManagerShortCut
aux_EnableSearchBar
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ