Coi
Gnk
Hbo
Pil
Rxb
Rxm
Tpv
Tqa
Xix
Static task
static1
Behavioral task
behavioral1
Sample
bd0cf766c782118c8c12e0f95adcbbc7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bd0cf766c782118c8c12e0f95adcbbc7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bd0cf766c782118c8c12e0f95adcbbc7_JaffaCakes118
Size
128KB
MD5
bd0cf766c782118c8c12e0f95adcbbc7
SHA1
d1804e42e64d9e8828b54ff85dfbe780a5c3e84c
SHA256
9560d417572555bce54df5906811400ba938403bc12cc7492ab6ad5a6590833d
SHA512
9f5180c8bcf053d960ffbb20c2163d992158d66243ad752cefa01c43597c40b5a916db03978723300b512cdc1e44d9a08e500e04636c17974cd4f8a419924c0e
SSDEEP
3072:Og0ZrThJnJwgdvRDpw4Ww5yd9jyHIJs7XYKKMMiU1m9:OrHGuNweAxUIJaYKKNP
Checks for missing Authenticode signature.
resource |
---|
bd0cf766c782118c8c12e0f95adcbbc7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
AdjustTokenPrivileges
InitializeSecurityDescriptor
OpenProcessToken
OpenServiceA
QueryServiceStatus
SetSecurityDescriptorDacl
StartServiceA
ControlService
WriteClassStg
StringFromGUID2
WriteFmtUserTypeStg
ReleaseStgMedium
RegisterDragDrop
OleUninitialize
CoResumeClassObjects
CoRegisterMessageFilter
CoInitialize
WriteClassStm
CoCreateGuid
OleSaveToStream
lstrcpyA
WriteFile
UnmapViewOfFile
TlsSetValue
SetEndOfFile
LeaveCriticalSection
GetStartupInfoA
GetCommandLineA
ExitProcess
EnumResourceTypesA
CompareStringA
CloseHandle
SleepEx
Coi
Gnk
Hbo
Pil
Rxb
Rxm
Tpv
Tqa
Xix
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ