cfds
fdsce
yitrer
Static task
static1
Behavioral task
behavioral1
Sample
d2c4bb697b04a7bf833f1a7febd27bc0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d2c4bb697b04a7bf833f1a7febd27bc0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d2c4bb697b04a7bf833f1a7febd27bc0_JaffaCakes118
Size
40KB
MD5
d2c4bb697b04a7bf833f1a7febd27bc0
SHA1
65f98cbc9ddd6b2e0df9e9bc54478fc65cfe2880
SHA256
f5e637c077bd7ad449a3bee12cb0e1047d04c8f3234db099cc19cde217da2801
SHA512
0ebc4a6b2f68ea2241d18ac441b992f759e5e272aacdc88b9a58b104e5aba539112f3ae4532a19544f5a14a742e2d4058af49c8b73cb72442d80c50a525cfe04
SSDEEP
384:ruhRQ/xwPNco/7ouNvRdnHkDMd7/v0ZPhj8FP3EQzblPQNTkRiMIvhAm:6hRQwK/uN5ZHkD4/sZ+ZEQnhvRiBAm
Checks for missing Authenticode signature.
resource |
---|
d2c4bb697b04a7bf833f1a7febd27bc0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
WriteFile
DeleteFileA
InitializeCriticalSection
VirtualProtectEx
VirtualProtect
GetPrivateProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
IsBadReadPtr
SetUnhandledExceptionFilter
SetThreadContext
OpenThread
MultiByteToWideChar
TerminateProcess
CreateProcessA
VirtualAlloc
GetCurrentThreadId
GetCurrentProcess
ExitProcess
GetCommandLineA
Sleep
VirtualAllocEx
TerminateThread
CreateThread
GetCurrentProcessId
CreateMutexA
GetLastError
GetModuleHandleA
LoadLibraryA
ReadProcessMemory
GetProcAddress
GetWindowTextA
CallNextHookEx
GetAsyncKeyState
GetWindowThreadProcessId
ToAscii
_strcmpi
_strupr
_stricmp
_strlwr
strcat
sprintf
strcpy
strlen
strncpy
strstr
memset
memcpy
strcmp
??2@YAPAXI@Z
wcslen
strrchr
??3@YAXPAX@Z
strchr
__CxxFrameHandler
cfds
fdsce
yitrer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ