Mqmefawet
SetNteajdtrgqm
Afhbaovpyu
AddNavukfr
CreateByjgyrfw
IsCpmngic
Cmbdviwf
WriteEvsohyodtf
Static task
static1
Behavioral task
behavioral1
Sample
b3448ed205235e99a8b5579740437b46_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3448ed205235e99a8b5579740437b46_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b3448ed205235e99a8b5579740437b46_JaffaCakes118
Size
64KB
MD5
b3448ed205235e99a8b5579740437b46
SHA1
419556dc99be921efc0474f95a53b09c9ad8aafc
SHA256
756874de679319384c9ccbf6dcdb5559f647ba7fbecdf7ed8efb1a01f71dc3c7
SHA512
bd9124ba87b460a59155ce11c8a4e0ca967b9555bd84c5a89b44a758f8de13994605499cf83faf3f5d43f8a56d5f1ae2560c2d750846a97d4cbdcf97ca894968
SSDEEP
768:tuzf7ZXhbdlJqHBOE6ywtBgvvK3etUc33Rs1Eekpehef41Hwyk49sPk4/gwD:tuHrBjqoE6XngXRU6K1Ee0a91QzSwD
Checks for missing Authenticode signature.
resource |
---|
b3448ed205235e99a8b5579740437b46_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcessShutdownParameters
SetConsoleTextAttribute
GetCurrentProcess
IsSystemResumeAutomatic
ClearCommBreak
WriteConsoleOutputA
RaiseException
GetVolumeInformationA
WriteConsoleOutputAttribute
LocalUnlock
lstrlenA
ConnectNamedPipe
GetEnvironmentVariableA
GetNumberOfConsoleFonts
OpenMutexA
GetThreadLocale
IsBadCodePtr
ResetEvent
LocalAlloc
SetCommState
WriteProcessMemory
SetEvent
GetPriorityClass
VirtualAllocEx
HeapWalk
GetSystemDirectoryA
OpenEventA
ResumeSuspendedDownload
FtpRemoveDirectoryW
InternetQueryDataAvailable
FtpSetCurrentDirectoryW
InternetGetConnectedStateExA
InternetUnlockRequestFile
FtpSetCurrentDirectoryW
InternetCrackUrlA
Mqmefawet
SetNteajdtrgqm
Afhbaovpyu
AddNavukfr
CreateByjgyrfw
IsCpmngic
Cmbdviwf
WriteEvsohyodtf
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ