LIBMAIN
TALEAN
Static task
static1
Behavioral task
behavioral1
Sample
ba79f43b436d10968f68a79dc2b8054e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba79f43b436d10968f68a79dc2b8054e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ba79f43b436d10968f68a79dc2b8054e_JaffaCakes118
Size
205KB
MD5
ba79f43b436d10968f68a79dc2b8054e
SHA1
1a4c29c577996d294fed2d20a7f33cf1698cab91
SHA256
e17ed7807c7a8497f1ec61293695259114ec40038395addc4dde5304727dba9e
SHA512
731ac2801eeab3a0060ba57486bfc947c1b9a862730224cf1d6abc427e798c9b8a1709487049334dc47d3d87ab7c44b9a05eca7ea5fc52c5e33f26eb07cab8ca
SSDEEP
6144:/CfMc8OOOOAFuqSDHz+YCAX7hCz+2O53YYVzciagFXxaCkW6yvhh:/Cfv8OOOOAFuqSDHz+YCAX7hCzbPYXMM
Checks for missing Authenticode signature.
resource |
---|
ba79f43b436d10968f68a79dc2b8054e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
RegOpenKeyExA
RegCloseKey
CloseHandle
CreateFileA
ExitProcess
FlushFileBuffers
GetCommandLineA
GetEnvironmentStringsA
GetFileSize
GetLastError
GetModuleHandleA
GetStartupInfoA
GetSystemInfo
GetVersionExA
GlobalAlloc
GlobalFree
GlobalReAlloc
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
WriteFile
GlobalLock
GlobalUnlock
GetShortPathNameA
SysAllocStringByteLen
SysFreeString
SysStringByteLen
MessageBeep
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
CopyRect
CreateFontIndirectA
GetObjectA
TextOutA
SetTextAlign
CreateMetaFileA
CloseMetaFile
CreatePen
CreateBrushIndirect
SelectObject
DeleteObject
GetStockObject
Rectangle
SetWindowExtEx
SetWindowOrgEx
SetBkColor
SetTextColor
SetBkMode
SetMapMode
DeleteMetaFile
GetDeviceCaps
SaveDC
RestoreDC
SetViewportExtEx
SetViewportOrgEx
PlayMetaFile
CreateEnhMetaFileA
CloseEnhMetaFile
DeleteEnhMetaFile
GetEnhMetaFileBits
SetEnhMetaFileBits
LIBMAIN
TALEAN
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ