GetCaptureDeviceFormat
UpdateFromAppChange
Static task
static1
Behavioral task
behavioral1
Sample
b66005f45435302e2b62d72054f6cdb9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b66005f45435302e2b62d72054f6cdb9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b66005f45435302e2b62d72054f6cdb9_JaffaCakes118
Size
161KB
MD5
b66005f45435302e2b62d72054f6cdb9
SHA1
f42e41db8d516ee8c199c61311e409d3798165e7
SHA256
0bcde4757b25537ef264412de478de615542ede65a182f0d8b70c6801e96c16b
SHA512
dbb1d1a1a588defd1488d075fe5decf09022d1e42ae7a2e36d6493e89ae03a6c4d08bbf108ffb5bed86487a1132ce1623994c9226194cc0c3bbe93369f1f9706
SSDEEP
3072:/pRogmZ8jnkPJngXP3cU1Ox+C3OT5AB0jit9Z99Csw0xrPsnw:/HogmZ8jni+B4+C65AB0jit9V3a
Checks for missing Authenticode signature.
resource |
---|
b66005f45435302e2b62d72054f6cdb9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateFileA
DeleteCriticalSection
ExitProcess
FindResourceA
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetProcessHeap
GetStartupInfoA
GetSystemInfo
GlobalLock
HeapAlloc
HeapCreate
InitializeCriticalSection
InterlockedDecrement
LoadResource
MultiByteToWideChar
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsGetValue
WriteConsoleW
lstrcmpA
_exit
time
wcscmp
fprintf
RegisterClassA
EndDialog
LoadMenuA
DrawFrameControl
DefFrameProcA
DefDlgProcA
InvalidateRgn
GetMenuCheckMarkDimensions
FrameRect
DrawIconEx
EnumChildWindows
VarBstrCmp
SafeArrayAllocDescriptor
SafeArrayDestroy
SysReAllocString
SafeArrayAccessData
PathGetDriveNumberA
SHEnumKeyExA
PathAppendA
GetCaptureDeviceFormat
UpdateFromAppChange
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ