Hvy
Sgx
Yle
Static task
static1
Behavioral task
behavioral1
Sample
b6b4eb555f3a50752f9d2a1b76121654_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b6b4eb555f3a50752f9d2a1b76121654_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b6b4eb555f3a50752f9d2a1b76121654_JaffaCakes118
Size
131KB
MD5
b6b4eb555f3a50752f9d2a1b76121654
SHA1
b79229838699d1c91927acdc76017d02c5b57bc2
SHA256
59b60d41917f24536991f39962857d6f410c60481171d60bb90f6f7a8dafebf8
SHA512
03b5cc4d2ff2f9fc66629db6ddc7f7303320d7979773a02727b4084e49375d504072f64bfbb42340162a5ac39ab7aac3d0aa51410056ee56b96c432966db5cc8
SSDEEP
3072:ht1B7UpOWNqtt32gRqfdBw7i0KMMiU1m9:ht1gOWYtGg4Gi0KNP
Checks for missing Authenticode signature.
resource |
---|
b6b4eb555f3a50752f9d2a1b76121654_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VariantCopyInd
SysFreeString
SysAllocStringLen
LoadTypeLib
OpenServiceA
QueryServiceStatus
SetSecurityDescriptorDacl
StartServiceA
AdjustTokenPrivileges
OpenProcessToken
CloseServiceHandle
ControlService
CreateServiceA
DeleteService
InitializeSecurityDescriptor
WriteFmtUserTypeStg
StgCreateDocfileOnILockBytes
ReadClassStg
OleSetClipboard
GetRunningObjectTable
CLSIDFromString
GetConvertStg
CreateFileMoniker
CoUninitialize
CoLockObjectExternal
CoGetClassObject
WriteClassStm
SetMenuInfo
OemToCharA
LoadMenuA
LoadAcceleratorsW
GetDC
GetCursor
CreateIconFromResource
CreateDialogParamA
CharNextA
SHGetFileInfoA
SHFileOperationA
SHGetMalloc
SHBindToParent
StrStrIA
PathIsRootA
PathIsRelativeA
PathIsDirectoryA
StrChrA
PathFindExtensionA
PathFileExistsA
PathCompactPathExA
PathCanonicalizeA
PathAppendA
SHAutoComplete
PathUnquoteSpacesA
PathQuoteSpacesA
PathFindFileNameA
PathMatchSpecA
time
strlen
__set_app_type
sscanf
realloc
memcpy
memchr
malloc
free
fflush
memmove
SetCurrentDirectoryA
UnmapViewOfFile
lstrcatA
lstrcmpA
lstrlenA
OpenFile
LoadLibraryA
HeapAlloc
FindResourceA
CompareStringA
OpenFileMappingA
Hvy
Sgx
Yle
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ