x
y
z
Static task
static1
Behavioral task
behavioral1
Sample
b2324eab9cf9a6f42ed610badc293166_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b2324eab9cf9a6f42ed610badc293166_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b2324eab9cf9a6f42ed610badc293166_JaffaCakes118
Size
31KB
MD5
b2324eab9cf9a6f42ed610badc293166
SHA1
26d38aec1e6a3cf0fe46847f5623161fdf22f314
SHA256
de208b9d3d9046ad1a22a5d87da67277e59e1bdc4ba639b20b2348c90144c720
SHA512
4e7b8d281f3e1f28afd675256a978bb6d7a9a8b99c9bcca2c80de083432fa5048d47bce08f00052c895edabc619bcb0f3879e7aa57d947d7ced95b6257cb1389
SSDEEP
384:12ZY1YfbVjDNw4/ftKcDoizP749W46JBvXI1owy:EYcxjDWkDP74I46JBvISw
Checks for missing Authenticode signature.
resource |
---|
b2324eab9cf9a6f42ed610badc293166_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapFree
HeapReAlloc
GetTempFileNameA
GetTempPathA
GetProcAddress
GetModuleHandleA
lstrcatA
MulDiv
GetTickCount
CloseHandle
CreateFileA
WaitForMultipleObjects
WaitForSingleObject
DeleteFileA
CreateEventA
GetProcessHeap
OutputDebugStringA
GetModuleFileNameA
InterlockedExchange
RtlUnwind
HeapAlloc
PulseEvent
GetCommandLineA
WriteFile
FindNextFileA
OpenEventA
OpenEventW
lstrlenA
CreateProcessA
VirtualQuery
GetLastError
ReadFile
GlobalAlloc
lstrcpynA
lstrcpyA
SetFilePointer
GlobalFree
PeekMessageW
CallWindowProcA
DestroyWindow
EnableWindow
GetWindowLongA
CreateWindowExA
RegisterWindowMessageA
SetDlgItemTextA
MessageBoxA
wsprintfA
SetWindowTextA
SendMessageA
GetDlgItem
GetFocus
IsWindowVisible
SetWindowLongA
CharLowerBuffA
ShowWindow
GetClientRect
GetWindowRect
RegQueryValueExA
RegCloseKey
RegOpenKeyW
RegOpenKeyA
RegEnumValueA
RegOpenKeyExA
InternetReadFile
InternetSetFilePointer
HttpOpenRequestA
InternetCrackUrlA
FindCloseUrlCache
FindFirstUrlCacheEntryA
InternetCloseHandle
InternetOpenA
InternetConnectA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
x
y
z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ