Ins
_Ins@16
Static task
static1
Behavioral task
behavioral1
Sample
bbddf3200c7cf671ce7dfb4216c2770f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bbddf3200c7cf671ce7dfb4216c2770f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bbddf3200c7cf671ce7dfb4216c2770f_JaffaCakes118
Size
45KB
MD5
bbddf3200c7cf671ce7dfb4216c2770f
SHA1
af26e2ecf221e03aa64e96627f5737b3f41bc4b5
SHA256
715f0f0f5ab2f2a840847653c7b52c9e721df1741877ce17b8dea244382753fc
SHA512
3107bc2b17885dae8af45cabc81cf1a219826f09f97b598c9bb81fadd20a08cdd82e1e3a74e6f8a150dd2535f81b0d0e48a435bee77e17090ad605dfc7e23f0f
SSDEEP
192:rm9mf7Ymx49lUptevjH7nmurDRs8Tou5gjixqatLbQMzzrjPTStqIm9b3pN17QX:rmofT6rLmOWEohuxD9hzPjcm53p
Checks for missing Authenticode signature.
resource |
---|
bbddf3200c7cf671ce7dfb4216c2770f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
ReleaseMutex
GetLastError
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory
VirtualAllocEx
OpenProcess
lstrcmpiA
FindClose
FindNextFileA
FindFirstFileA
Module32Next
Module32First
VirtualProtectEx
GetModuleHandleA
ReadFile
GetPrivateProfileStringA
CreateThread
GetModuleFileNameA
TerminateProcess
GetCurrentProcessId
GetWindowsDirectoryA
Sleep
CreateMutexA
LoadLibraryA
GetProcAddress
lstrcpyA
lstrlenA
Process32Next
lstrcatA
CloseHandle
wsprintfA
StrStrIA
_purecall
strstr
strncat
__CxxFrameHandler
??2@YAPAXI@Z
memcpy
??3@YAXPAX@Z
_itoa
memset
Ins
_Ins@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ