aab
all
allert
allert2
load
windows
Static task
static1
Behavioral task
behavioral1
Sample
b818806e29eb365a4e8a7e11dd865b6f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b818806e29eb365a4e8a7e11dd865b6f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b818806e29eb365a4e8a7e11dd865b6f_JaffaCakes118
Size
12KB
MD5
b818806e29eb365a4e8a7e11dd865b6f
SHA1
baed5178e9da65848d776367f9fa0714873e0dbc
SHA256
ca19bb2a86bbe32492a3314cf115b01e10bc076c20f30a5187a688db183a7e15
SHA512
86e5b2083e13f80e9e88c54be20cfbd9cb8116b7e927673abacc1ad16ba929a4e20699eebc437f48700a9a42e9006926bda3a06842a8aaadbe846bca4f92af01
SSDEEP
384:oi5oQ/LEJr0mWbjqlrqbbV+ujzlX+M7i:oizz40mW3imX8EO
Checks for missing Authenticode signature.
resource |
---|
b818806e29eb365a4e8a7e11dd865b6f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegisterClassExA
SetTimer
PostQuitMessage
TranslateAcceleratorA
TranslateMessage
LoadIconA
LoadAcceleratorsA
BeginPaint
LoadCursorA
SetWindowPos
KillTimer
GetMessageA
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
lstrcpynA
TerminateProcess
RtlZeroMemory
LoadLibraryA
GetVersionExA
GetTempPathA
GetTempFileNameA
GetProcAddress
GetModuleFileNameA
CloseHandle
CreateThread
DeleteFileA
GetLongPathNameA
WaitForSingleObject
strlen
strcpy
strcat
fwrite
fseek
fread
fopen
fclose
atoi
_strlwr
PathFileExistsA
StrStrA
Shell_NotifyIconA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
aab
all
allert
allert2
load
windows
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ