Msdpateboa
WriteBcjowusoq
Static task
static1
Behavioral task
behavioral1
Sample
b4edcfbde50f89372467bae5d88facd8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b4edcfbde50f89372467bae5d88facd8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b4edcfbde50f89372467bae5d88facd8_JaffaCakes118
Size
64KB
MD5
b4edcfbde50f89372467bae5d88facd8
SHA1
b46d3fae7b1d71b8b1755433864c04721c7e6eb3
SHA256
d585ae5239e73b8c32fb797c58a2f5eaf12b76fef056cd1135aea610d2ff8b19
SHA512
527ec327490e9de38f048630c7be2d31ef5e9b869c4785005f8ff5f4c9c87ac7b80785e05112fd4cd02edfa8eaaf44a5bee8ee6779014e6448e5a2bf0eab2017
SSDEEP
1536:BxgQkGaDJxBazaKMVMek1VP2+HzFLKupBpkGCknhGkICIS:rkJJfuaKIMek1VP2+TFeupBrHhOCI
Checks for missing Authenticode signature.
resource |
---|
b4edcfbde50f89372467bae5d88facd8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTapeStatus
DefineDosDeviceA
GetProcAddress
GetProcessTimes
WriteFile
QueryPerformanceCounter
GetProcessId
GetLogicalDrives
GlobalUnfix
GetProcessHandleCount
GetCurrentDirectoryA
GetModuleHandleA
LoadLibraryExA
GetConsoleMode
GetTickCount
Module32Next
CancelWaitableTimer
GetProcessIoCounters
VirtualAlloc
ReleaseSemaphore
CopyFileExA
GetCurrentProcess
SetHandleInformation
QueueUserWorkItem
FreeEnvironmentStringsA
GetCurrentThread
SetVolumeLabelA
SetDefaultCommConfigA
CompareStringA
GetCommMask
InternetCrackUrlA
InternetGetConnectedStateExA
ResumeSuspendedDownload
FtpSetCurrentDirectoryW
InternetUnlockRequestFile
InternetQueryDataAvailable
FindNextUrlCacheEntryW
Msdpateboa
WriteBcjowusoq
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ