Krinopwsjc
Cpcecuc
CloseEdvktocnr
Mfaimgwq
Mslctim
IsMvhyisdaifd
Nwlgjgbe
Static task
static1
Behavioral task
behavioral1
Sample
b64c8cb8251b1d10d80f0589b8c11fb2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b64c8cb8251b1d10d80f0589b8c11fb2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b64c8cb8251b1d10d80f0589b8c11fb2_JaffaCakes118
Size
120KB
MD5
b64c8cb8251b1d10d80f0589b8c11fb2
SHA1
87cda6ab4eeb9c2f4bd8438c7a2a8a0c9e334870
SHA256
8ecd8b411f4769132781acffa9cbf4901864bee435c252c4ac07618ccc53fd4b
SHA512
d043828dc2698f9b38b87d9e94114ef43b995855a379c7e96356c8ec12776dbe9b4b2a5a32e203c7b6f322db01e0fd7560487bbfc3d64b2d1c3ea649fb9f70b9
SSDEEP
3072:cqjWI7O3DNYrPVx87/Eg2DGanA/CUXbtk231rnK:ZWIsKVm7s/ianyCUq2lr
Checks for missing Authenticode signature.
resource |
---|
b64c8cb8251b1d10d80f0589b8c11fb2_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentProcess
GetDiskFreeSpaceA
GetCommandLineW
UnregisterWait
VirtualAllocEx
SetFileTime
GetVersionExA
ReadConsoleA
ExitProcess
GetFileSize
WritePrivateProfileSectionW
ReadFile
SetUnhandledExceptionFilter
WriteFile
BringWindowToTop
LoadBitmapA
RemoveMenu
MenuItemFromPoint
DialogBoxIndirectParamAorW
BroadcastSystemMessageExW
MenuItemFromPoint
ActivateKeyboardLayout
GetWindowTextA
PrivateExtractIconExA
InvalidateRect
memcpy
_snwprintf
toupper
lineDrop
lineSetAgentStateEx
lineCreateAgentSessionW
lineConfigDialogEdit
Krinopwsjc
Cpcecuc
CloseEdvktocnr
Mfaimgwq
Mslctim
IsMvhyisdaifd
Nwlgjgbe
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ