fa
fc
Static task
static1
Behavioral task
behavioral1
Sample
b18895c431699652e86bd4201030776c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b18895c431699652e86bd4201030776c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b18895c431699652e86bd4201030776c_JaffaCakes118
Size
17KB
MD5
b18895c431699652e86bd4201030776c
SHA1
3bbf35a4c9b67f671c964c8b4c5ea4c0d3dce402
SHA256
9dd2ee1ae396f59ec5bd600831d5bc8f0a14cc4952a47298fe106367f8ef8ec5
SHA512
a09fce196f6d6faa6c6efa90d4b5ab2aa1776be9a4bdf90af4d1c1d2948cc8ee659f696e0ebdc3576b8a201039eeefe851b4d7abb73954a9cb661921e6d463f9
SSDEEP
192:7SliRNKEZZhrfZpfKWln23jrcdD0MUqz007hmExyyGpJXFf1M3zRL46gdxAn:4iRNHPhrfZy3jrM0MzPYEx/GXFfO33n
Checks for missing Authenticode signature.
resource |
---|
b18895c431699652e86bd4201030776c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
Sleep
VirtualProtectEx
GlobalFree
ReadProcessMemory
WideCharToMultiByte
GlobalAlloc
IsBadReadPtr
GetPrivateProfileStringA
GetProcAddress
GetModuleHandleA
CreateThread
GetModuleFileNameA
GlobalLock
GetCurrentProcess
CallNextHookEx
SetWindowsHookExA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
_adjust_fdiv
malloc
_stricmp
_initterm
free
strrchr
??3@YAXPAX@Z
strcpy
??2@YAPAXI@Z
sprintf
strlen
strncpy
strchr
strstr
fclose
fread
fopen
memset
memcpy
strcmp
fa
fc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ