InstallReader
UninstallReader
Static task
static1
Behavioral task
behavioral1
Sample
ceb430839d368573d0a4786bec403eb6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ceb430839d368573d0a4786bec403eb6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ceb430839d368573d0a4786bec403eb6_JaffaCakes118
Size
48KB
MD5
ceb430839d368573d0a4786bec403eb6
SHA1
2743808a5c8c9e8ffe99883ecb4a7a732d6d51b9
SHA256
147e5b138cce49e5c48ec28bf55c16c6f7fc492d45e1dbb7ae8cd2bef7be8694
SHA512
a46efe70492eb96b1fd391b93b57c17a90c3bbad7e7a9b5c9ce3a4afb3c6341585c47cc7da9a5301b89da6efe39345e07d8cafae8758ef57bc76b7b7a13da26c
SSDEEP
768:UM+K4aVRFFxTLQQ64TTrqMtcZ6hHdcUqI:0yvFFxTLs6a6ncUf
Checks for missing Authenticode signature.
resource |
---|
ceb430839d368573d0a4786bec403eb6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TerminateProcess
GetProcAddress
LoadLibraryA
GetCurrentThreadId
TlsSetValue
HeapFree
InterlockedDecrement
InterlockedIncrement
HeapAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
FreeLibrary
GetCurrentProcess
WriteFile
GetCPInfo
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
ord73
InstallReader
UninstallReader
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ