gcged
nwqrew
rewtwtw
Static task
static1
Behavioral task
behavioral1
Sample
bde37eeeac2744e5bc7f805a543bc52b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bde37eeeac2744e5bc7f805a543bc52b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bde37eeeac2744e5bc7f805a543bc52b_JaffaCakes118
Size
40KB
MD5
bde37eeeac2744e5bc7f805a543bc52b
SHA1
28d3885c5845aa097fe1fb92ded16c83014539f6
SHA256
36679afb0072c4e70b8099fb8227d892d9a832a425bfa13ab30f48219205dd41
SHA512
1f9cca803f2488ba5f5ee4e3a4ab848901ad38232b4fcc548244bc9fabe7f8a6247f2b1e5af0ceecfe781ac7356d73d7759463fb6159c27ba979d6396b6273d1
SSDEEP
384:rcPTLFwVtTr45Raf3/iDYABg3/cte5i5RBR0769m5hxGXI3h+dvGIuIINQuac0Mx:sypoi3KDo3/Iec79exGKA4ImNQuFX
Checks for missing Authenticode signature.
resource |
---|
bde37eeeac2744e5bc7f805a543bc52b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
WritePrivateProfileStringA
CreateThread
SetEvent
WriteFile
TerminateThread
IsBadReadPtr
VirtualFree
GetPrivateProfileStringA
GetCommandLineA
CreateMutexA
GetCurrentProcessId
GetTickCount
VirtualFreeEx
lstrlenA
VirtualAllocEx
GetCurrentProcess
GetModuleFileNameA
VirtualAlloc
SetUnhandledExceptionFilter
SetThreadContext
OpenThread
WideCharToMultiByte
MultiByteToWideChar
TerminateProcess
CreateProcessA
ExitProcess
GetCurrentThreadId
DisableThreadLibraryCalls
VirtualProtectEx
CreateEventA
GetLastError
WaitForSingleObject
ResetEvent
CreateFileA
ReadFile
CloseHandle
Sleep
DeleteFileA
GetTempPathA
lstrcatA
GetModuleHandleA
LoadLibraryA
ReadProcessMemory
GetProcAddress
GetWindowThreadProcessId
CallNextHookEx
GetWindowTextA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
??3@YAXPAX@Z
_strcmpi
_strlwr
_stricmp
sprintf
strcat
strlen
strcpy
strstr
memset
??2@YAPAXI@Z
memcpy
strrchr
rand
srand
strncpy
strchr
strcmp
__CxxFrameHandler
gcged
nwqrew
rewtwtw
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ