DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bc6f8db8091e0bdb95cc30a6d4d3a911_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bc6f8db8091e0bdb95cc30a6d4d3a911_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bc6f8db8091e0bdb95cc30a6d4d3a911_JaffaCakes118
Size
205KB
MD5
bc6f8db8091e0bdb95cc30a6d4d3a911
SHA1
8f0817318195ed7cf91f34f4382d89ae811517d9
SHA256
5e513c78b9a46280de788b7d18eae8b35e67cad9249ab523a54726658a5cd2fa
SHA512
2e9d5bbb12bff056b10334d86ffe6715de33213410174444b5b49ca9d8beb18f1cc955bf2b5ce6cc29235a2eab6afd9d123ba5a6c992ba5d6e68c99ac30fab12
SSDEEP
3072:TMg1/mVuoeYonh94ebQu1q8OMbHPtMXV1HwH6POdqXSy4QXvJ:wglSuYoj4uTeXq6HSyb
Checks for missing Authenticode signature.
resource |
---|
bc6f8db8091e0bdb95cc30a6d4d3a911_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RtlUnwind
RtlZeroMemory
ScrollConsoleScreenBufferA
RtlMoveMemory
VerSetConditionMask
lstrcpyA
RtlFillMemory
RtlCaptureStackBackTrace
RtlCaptureContext
RegisterWaitForSingleObjectEx
ReadFileScatter
CompareStringA
SetupComm
CloseHandle
RtlIpv6StringToAddressExA
RtlSubtreePredecessor
ClientToScreen
WindowFromDC
GetFontLanguageInfo
PaintRgn
SetMetaRgn
DeleteObject
GdiFlush
GetBkColor
Chord
PathRemoveBackslashA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ