PIDGenA
PIDGenSimpA
PIDGenSimpW
PIDGenW
Static task
static1
Behavioral task
behavioral1
Sample
be5340441baa95286ea5cbe12c833636_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
be5340441baa95286ea5cbe12c833636_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
be5340441baa95286ea5cbe12c833636_JaffaCakes118
Size
210KB
MD5
be5340441baa95286ea5cbe12c833636
SHA1
28112c6d39ee50abb724024dcac8e2dd5aa6abdd
SHA256
87eacc2125d4ca7f8e5bbe05c17520a9178acbf317534568d12d82a016c1e262
SHA512
b409583f49b5953467fd6fb1bbcb4de71b38a05991b54976183eb2a8ff71bf47a09489bc495260e0e1c4206ecb2ecbb5fc8b3d264592dec7480a270bf0e13200
SSDEEP
6144:OHW89dVyLyqBlLvc7Dx0CuyOn8jv1H/5cyU2dj2lD:qqvLcxSn8jvJ36
Checks for missing Authenticode signature.
resource |
---|
be5340441baa95286ea5cbe12c833636_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
FreeResource
LockResource
LoadResource
FindResourceW
SizeofResource
lstrcpyA
QueryDosDeviceW
GetLocalTime
GetTickCount
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
lstrcmpW
CreateFileW
GetVolumeInformationA
SetLastError
DeviceIoControl
CloseHandle
GlobalMemoryStatus
SystemTimeToFileTime
GetLastError
GetProcessHeap
HeapAlloc
HeapFree
CharNextW
wsprintfA
wsprintfW
RegOpenKeyExW
RegQueryValueExA
RegCloseKey
CryptGenRandom
CryptAcquireContextA
ord825
?terminate@@YAXXZ
_except_handler3
??1type_info@@UAE@XZ
PIDGenA
PIDGenSimpA
PIDGenSimpW
PIDGenW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ