check
copy
run
Static task
static1
Behavioral task
behavioral1
Sample
b359f4834e1807b343bacdfcd348c6a9_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b359f4834e1807b343bacdfcd348c6a9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b359f4834e1807b343bacdfcd348c6a9_JaffaCakes118
Size
19KB
MD5
b359f4834e1807b343bacdfcd348c6a9
SHA1
da2eaf65735ec86a3bfb101c1f5d96941b5f242f
SHA256
7a977d7dd92859dc0caf6391844222daf76a75dfed7f025c1a1f289096f407c5
SHA512
828fd2a6ee1a61ebce2035ce93ca9c5bfff372b72ee5346c81ffab26acea1ae1409cb640037d0ca4503c0fefb5af15f0ab35759af9582cdded61190510eafda1
SSDEEP
384:89AykcxhucrZzUW7etpKVi2L/yVR7qkc2oa/D1av4+:89AykcfrZj7u2TyVR2kc2ouDMQ
Checks for missing Authenticode signature.
resource |
---|
b359f4834e1807b343bacdfcd348c6a9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapFree
HeapReAlloc
GetFileAttributesA
GetTempPathA
MultiByteToWideChar
GetTickCount
WriteFile
ReadFile
CreateFileA
lstrcatA
lstrcmpA
SystemTimeToFileTime
GetLocalTime
SetFilePointer
GetProcessHeap
InterlockedExchange
RtlUnwind
HeapAlloc
GetModuleHandleA
SetEvent
GetProcAddress
CloseHandle
GlobalAlloc
LoadLibraryA
VirtualQuery
GetLastError
lstrcpynA
lstrcpyA
CreateEventA
GlobalFree
GetDesktopWindow
wsprintfA
CallWindowProcA
DestroyWindow
EnableWindow
CreateWindowExW
RegisterWindowMessageA
SetWindowLongA
SetDlgItemTextA
MessageBoxA
SetWindowTextA
GetDlgItem
GetFocus
IsWindowVisible
ShowWindow
GetClientRect
GetWindowRect
CreateWindowExA
GetWindowLongA
SendMessageA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetSetFilePointer
check
copy
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ