IsMjcwejge
EndEtbvmbpt
BeginJfadxkobt
Cxyhjghfu
WriteHcmstyjgeu
Uspexelmxr
Hrtyokmrya
Vdsekmaxwsv
Static task
static1
Behavioral task
behavioral1
Sample
b92fad827766e41525b2f55c789358bb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b92fad827766e41525b2f55c789358bb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b92fad827766e41525b2f55c789358bb_JaffaCakes118
Size
152KB
MD5
b92fad827766e41525b2f55c789358bb
SHA1
c83a2b59b21e1c67d503c176bf7bc4d3d2d4a726
SHA256
af32f2463cfd2be75eafa7e76679d9ce2147f6f2fff4d52bee32b358d8255120
SHA512
de900a646f8823503934771559635393324b3c265d66a6052db071cb3bd0d48d51ccc5b12afa85c4de78c198cb114ee5ddace4ef878e6bb76d03cfa8c6cc69c4
SSDEEP
3072:pDi3JlDkItaGxQewN5tehxMJI1zCrtOmKzZoGLe/cG+QjR:pG3zA6Qectehx31gtOltDLeE
Checks for missing Authenticode signature.
resource |
---|
b92fad827766e41525b2f55c789358bb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalWire
ReadConsoleOutputCharacterA
FindAtomA
ExpungeConsoleCommandHistoryA
LocalShrink
WriteConsoleA
ReadConsoleOutputA
BeginUpdateResourceA
SetConsoleTitleA
VirtualAllocEx
GetTickCount
GlobalFindAtomA
GetFileAttributesExA
RaiseException
LocalLock
lstrcpynA
ResetEvent
GetThreadTimes
OpenEventA
GetModuleFileNameA
GetProcessHeap
VerifyVersionInfoA
GetStringTypeExA
SetEvent
GetSystemWindowsDirectoryA
GetTimeZoneInformation
GetVersionExA
GetCommandLineA
GetProfileStringA
MultiByteToWideChar
GetTempPathA
GetProcessId
VirtualLock
InternetQueryDataAvailable
FtpSetCurrentDirectoryW
FtpSetCurrentDirectoryW
InternetGetConnectedStateExA
InternetCrackUrlA
FtpRemoveDirectoryW
ResumeSuspendedDownload
InternetUnlockRequestFile
IsMjcwejge
EndEtbvmbpt
BeginJfadxkobt
Cxyhjghfu
WriteHcmstyjgeu
Uspexelmxr
Hrtyokmrya
Vdsekmaxwsv
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ