AWEGetObject16
AWEGetObject32
AWEManager
AWESetObject16
Static task
static1
Behavioral task
behavioral1
Sample
c25ca5b6a143fba8275835c1b5030f98_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c25ca5b6a143fba8275835c1b5030f98_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c25ca5b6a143fba8275835c1b5030f98_JaffaCakes118
Size
196KB
MD5
c25ca5b6a143fba8275835c1b5030f98
SHA1
263f88d19a25f82be650c0f22c4a061e5c7ad5e4
SHA256
0aaa9871bc30d027c5b0e5b8393b82563fe747ee653992cf39a11a8823847ff4
SHA512
7a70a1c66a25e27154b510c96767d974163dbb9bdc80e6969e2eae0dbed2829f68b72e21274d9937a7ddad7b404cc9e8ab2acd5e304148fd53efd148c1620af3
SSDEEP
3072:xXD0aUhwk0iy2Jrhs4b9BRdHv6WAbjC2XL+awSAPWW638Knfww:R0pJ0x2hhs4JBLHSW2pwSQxLKfw
Checks for missing Authenticode signature.
resource |
---|
c25ca5b6a143fba8275835c1b5030f98_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TlsAlloc
LoadLibraryA
GetSystemDirectoryA
FreeLibrary
GetCurrentProcessId
GetVersionExA
GetExitCodeProcess
OpenFile
InitializeCriticalSection
DeleteCriticalSection
VirtualAlloc
GetModuleFileNameA
GetEnvironmentStrings
GetCommandLineA
GetVersion
ExitProcess
GetCurrentThreadId
TlsSetValue
GetProcAddress
TlsFree
TlsGetValue
VirtualFree
GetStartupInfoA
GetFileType
GetACP
GetOEMCP
GetCPInfo
GetStdHandle
GetLastError
WriteFile
EnterCriticalSection
LeaveCriticalSection
LoadStringA
AWEGetObject16
AWEGetObject32
AWEManager
AWESetObject16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ