GetFrameBufferPtr
StartStreaming
TextOutWCP_ME
Static task
static1
Behavioral task
behavioral1
Sample
bb02bf7afa36345adbd208da04fb2cbe_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb02bf7afa36345adbd208da04fb2cbe_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bb02bf7afa36345adbd208da04fb2cbe_JaffaCakes118
Size
166KB
MD5
bb02bf7afa36345adbd208da04fb2cbe
SHA1
987a8d47ea4314a4193ca01f59d00cc065b790ce
SHA256
1971c295907b845c4e65be239df1a944c17254df1d12b2af45ec01429a9261c6
SHA512
dd5a9f91d3eb95da9bf29840b751f4ea328ab7e4a0ef8eb81df113b2e13025b902ef48bf2ba4937ca4e6594798d873105232cfaaeca9976697015cd6c8050568
SSDEEP
3072:/sR7AsLYoHXxFK4DrQS0w0PofmuilyW+78yX0querR8pqjO9PhvKTkpH5qT9Hwk2:/snh3L0w3+hrs8pGcPJUkg1wkv0A
Checks for missing Authenticode signature.
resource |
---|
bb02bf7afa36345adbd208da04fb2cbe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
DuplicateHandle
ExitProcess
FileTimeToSystemTime
FindResourceA
FreeEnvironmentStringsW
GetACP
GetCommandLineA
GetCurrentProcessId
GetCurrentThread
GetExitCodeThread
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemInfo
GetVersion
HeapAlloc
HeapCreate
HeapReAlloc
IsBadReadPtr
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
lstrcpynA
exit
__p__commode
__set_app_type
isdigit
realloc
__getmainargs
BeginDeferWindowPos
GetSubMenu
GetUserObjectSecurity
PostQuitMessage
SetClassLongA
SetClipboardData
ClientToScreen
EnumChildWindows
VarBstrCmp
VarBstrCat
SysStringLen
SysFreeString
SetErrorInfo
SafeArrayCreate
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayAccessData
RevokeActiveObject
OleTranslateColor
OleLoadPicturePath
OleLoadPicture
OleIconToCursor
GetErrorInfo
GetFrameBufferPtr
StartStreaming
TextOutWCP_ME
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ