check
copy
run
Static task
static1
Behavioral task
behavioral1
Sample
d418e00bb857cb3c467f00f2250133e1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d418e00bb857cb3c467f00f2250133e1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d418e00bb857cb3c467f00f2250133e1_JaffaCakes118
Size
20KB
MD5
d418e00bb857cb3c467f00f2250133e1
SHA1
063e5a67aa58f95ab3227b70000935a6a7e6b5b9
SHA256
0989a358e37a9909b4061e5c41339be1cc68478da308f06ec4bd83ddaec6fa42
SHA512
61b1390b269dc91f3da10dfffa5833a5b385674282725cde992f1a3d6f93206c5ab2d90ca1f197d25ed4b44540d4ec9c0ef5de2884320867c353c25c2ed30ea8
SSDEEP
384:0tEBACxZPujBbFMNXTKUzKKkb3MySq7qkc2I6/D1avQov:0GACxyxFwTKb8ySq2kc2IODMo
Checks for missing Authenticode signature.
resource |
---|
d418e00bb857cb3c467f00f2250133e1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcessHeap
HeapFree
HeapReAlloc
GetFileAttributesA
GetTempPathA
MultiByteToWideChar
GetTickCount
CloseHandle
WriteFile
ReadFile
CreateFileA
lstrcatA
lstrcmpA
SystemTimeToFileTime
GetLocalTime
HeapAlloc
CreateEventA
InterlockedExchange
RtlUnwind
GetModuleHandleA
ResetEvent
FreeLibrary
GetProcAddress
SetEvent
GlobalAlloc
LoadLibraryA
VirtualQuery
GetLastError
lstrcpynA
lstrcpyA
SetFilePointer
GlobalFree
GetDesktopWindow
wsprintfA
CallWindowProcA
DestroyWindow
EnableWindow
CreateWindowExW
RegisterWindowMessageA
SetWindowLongA
SetDlgItemTextA
MessageBoxA
SetWindowTextA
SendMessageA
GetFocus
IsWindowVisible
ShowWindow
GetClientRect
GetWindowRect
CreateWindowExA
GetWindowLongA
GetDlgItem
RegOpenKeyA
RegCloseKey
RegQueryValueExA
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetSetFilePointer
check
copy
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ