check
copy
run
Static task
static1
Behavioral task
behavioral1
Sample
bde95ed0f3300d3d021f826f461f9e72_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bde95ed0f3300d3d021f826f461f9e72_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bde95ed0f3300d3d021f826f461f9e72_JaffaCakes118
Size
32KB
MD5
bde95ed0f3300d3d021f826f461f9e72
SHA1
0aba6908781098ee75186486613f2c5ecfb2e5ca
SHA256
6bde28078d33f56d30aa1f039a31019579528e3de40398fcfbcb66a09ae76204
SHA512
5a1b2c96d439cade9bb77ac1c462fe1ba955fcfb6d176b14434c81106ef804513a88c0804ff50fb23b8256621c88fe7943ef22d2d468c0ff6fa6c8255de69f63
SSDEEP
384:ok9jo/J63zwOxrx8cgeq27NBGgX0NKOKn295YIcO6F+BRZ:WOEOxt8leq15TKny5YIcOGeZ
Checks for missing Authenticode signature.
resource |
---|
bde95ed0f3300d3d021f826f461f9e72_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapFree
HeapReAlloc
GetFileAttributesA
GetTempPathA
MultiByteToWideChar
GetTickCount
CloseHandle
WriteFile
ReadFile
CreateFileA
lstrcatA
lstrcmpA
SystemTimeToFileTime
GetSystemTime
HeapAlloc
CreateEventA
GetModuleHandleA
GetProcessHeap
PulseEvent
GetProcAddress
FreeLibrary
LoadLibraryA
GetLastError
GlobalFree
GlobalAlloc
lstrcpynA
lstrcpyA
SetFilePointer
RegisterWindowMessageA
SetWindowLongA
SetDlgItemTextA
MessageBoxA
SetWindowTextA
EndPaint
BeginPaint
AnyPopup
ShowWindow
IsChild
SendMessageA
GetDlgItem
GetFocus
GetClientRect
GetWindowRect
CreateWindowExA
GetWindowLongA
CreateWindowExW
EnableWindow
DestroyWindow
CallWindowProcA
wsprintfA
IsWindowVisible
RegQueryValueExA
RegOpenKeyA
RegCloseKey
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetSetFilePointer
check
copy
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ