CiPNlsvmq
XhjezJJcHD
hXiFouKxGz
tQWTdPmR
yDhdbNMbj
Static task
static1
Behavioral task
behavioral1
Sample
c0696478b72ec2c4732a2c62dbe64783_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c0696478b72ec2c4732a2c62dbe64783_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c0696478b72ec2c4732a2c62dbe64783_JaffaCakes118
Size
81KB
MD5
c0696478b72ec2c4732a2c62dbe64783
SHA1
c83873d20195b5d6532a6cb459e08d26f819adad
SHA256
e98cbac6744606ea48920755a9eeb9a17ca36152eb3df48af15586fb32601064
SHA512
a1ccd2387c226461a7cae6871d48950a0314120037caf10aa2249e0ff51c2da8136b1dbb7c4ff8b4c95796fc123b92fcb166b97e3651f8ea3d16397259bb53c4
SSDEEP
1536:GJgBfzRFrSj3uy8D52e+qCheG3h90MA28w28fV16j1:ZBfFFrS2aqChZb0T2O8fu
Checks for missing Authenticode signature.
resource |
---|
c0696478b72ec2c4732a2c62dbe64783_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_except_handler3
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
RtlUnwind
SystemTimeToFileTime
SetEvent
GetVolumeInformationA
GetLocaleInfoA
GetTickCount
ReleaseMutex
MoveFileExA
GetWindowsDirectoryA
WritePrivateProfileStringA
MoveFileA
GetSystemTime
GetSystemDirectoryA
lstrcmpiA
lstrcmpA
GetVersionExA
CreateEventA
VirtualFree
ResumeThread
TerminateProcess
GlobalFree
GetThreadContext
VirtualQueryEx
LoadLibraryA
FreeLibrary
GlobalAlloc
VirtualAlloc
DeleteFileA
GetTempPathA
GetModuleFileNameA
GetLastError
CreateMutexA
WaitForSingleObject
GetProcAddress
GetModuleHandleA
ExitProcess
Sleep
GetVersion
CreateProcessA
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrcpynA
lstrlenA
lstrcpyA
GetProcessHeap
HeapFree
ReadFile
HeapAlloc
GetFileSize
OpenProcess
GetCurrentThreadId
GetTempFileNameA
GetWindowTextA
FindWindowExA
MessageBoxA
OpenInputDesktop
GetThreadDesktop
SetThreadDesktop
CloseDesktop
GetFocus
EqualRect
ClientToScreen
GetCursorPos
IsWindowVisible
InflateRect
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
CallNextHookEx
GetWindowThreadProcessId
SetWindowsHookExA
PostMessageA
FindWindowA
RegDeleteKeyA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
CreateProcessAsUserA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
SHDeleteKeyA
SHDeleteValueA
SHGetValueA
SHSetValueA
GetBkMode
GetBkColor
CiPNlsvmq
XhjezJJcHD
hXiFouKxGz
tQWTdPmR
yDhdbNMbj
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ