x
y
z
Static task
static1
Behavioral task
behavioral1
Sample
d1bed1eb65bce96a07021fc817f6d910_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1bed1eb65bce96a07021fc817f6d910_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d1bed1eb65bce96a07021fc817f6d910_JaffaCakes118
Size
25KB
MD5
d1bed1eb65bce96a07021fc817f6d910
SHA1
e629d601e2dd0cf794178c27073f2869a3288807
SHA256
ce55d40ada2ef7e5d5579063b65597722b851b7487560b01a34d5b7463af254f
SHA512
abd5f7750d9ca0b04201469ca6a698a44662895a0081133c482dc217359ac2ff09157d6c8ac44f06f53396209f57be161378e41466a8d2f00d66bfd6a2017009
SSDEEP
384:3bwRz8+yOLY8MwVzDd5ATtyKcofvfJQCJMA6lvnZ:LwRz8+yAvMwdd5ATt/vfGCJM
Checks for missing Authenticode signature.
resource |
---|
d1bed1eb65bce96a07021fc817f6d910_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MulDiv
GetTickCount
CloseHandle
WriteFile
ReadFile
CreateFileA
WaitForMultipleObjects
DeleteFileA
CreateEventA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
RtlUnwind
GetProcAddress
GetTempPathA
GetTempFileNameA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
lstrlenA
CreateProcessA
ExitThread
CreateThread
GetLastError
SetEvent
GetModuleHandleW
GlobalFree
WaitForSingleObject
GlobalAlloc
lstrcpynA
lstrcpyA
InterlockedExchange
VirtualQuery
ShowOwnedPopups
CallWindowProcA
DestroyWindow
EnableWindow
GetWindowLongA
CreateWindowExA
GetWindowRect
RegisterWindowMessageA
SetWindowLongA
SetDlgItemTextA
MessageBoxA
wsprintfA
SetWindowTextA
SendMessageA
GetDlgItem
GetFocus
IsWindowVisible
CloseWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CharLowerBuffA
ShowWindow
GetClientRect
RegDeleteKeyW
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyW
RegCloseKey
RegEnumValueA
InternetReadFile
InternetSetFilePointer
InternetOpenA
InternetCloseHandle
InternetCrackUrlA
FindCloseUrlCache
FindFirstUrlCacheEntryA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
x
y
z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ