UmEInst
UmERun
UmEShutdown
UmEStartup
UmETest
Static task
static1
Behavioral task
behavioral1
Sample
d6b29136a50c52dccccfd2758e12b359_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d6b29136a50c52dccccfd2758e12b359_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d6b29136a50c52dccccfd2758e12b359_JaffaCakes118
Size
33KB
MD5
d6b29136a50c52dccccfd2758e12b359
SHA1
991d1024604150482cec6b046df1dc9161523425
SHA256
34bd33bc3798b0b74903909d8be12c6d2ed6ecea4d2086229f2b7b304869be98
SHA512
6b0f519857ab57120a1c1aad4d3ce179be0f760053b0389d69f8c3029053476d1e941bdf25b3e82ff55da359f5aff5cb1412aafa27ffcafbc9116dae2f2477ac
SSDEEP
768:+mWFdRs+VUiN3B3JYVOqOFUzCcE5tCpyxBxub4qV:+mW7V/3BZYqw5yNa
Checks for missing Authenticode signature.
resource |
---|
d6b29136a50c52dccccfd2758e12b359_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessA
GetTempPathA
lstrlenA
GetSystemTime
lstrcpynA
lstrcatA
CreateThread
GetLastError
WaitForSingleObject
MoveFileA
GetVolumeInformationA
lstrcmpA
CreateEventA
GetLocaleInfoA
MoveFileExA
GetModuleHandleA
FreeLibrary
GetSystemDirectoryA
SystemTimeToFileTime
GetCurrentThreadId
GetVersionExA
SetEvent
lstrcmpiA
GetProcAddress
VirtualAlloc
lstrcpyA
CreateFileA
GetWindowsDirectoryA
LoadLibraryA
GetFileSize
WritePrivateProfileStringA
OpenProcess
ReadProcessMemory
ReadFile
VirtualProtectEx
GetTempFileNameA
HeapAlloc
DeleteFileA
HeapFree
GetProcessHeap
GetThreadContext
SetThreadContext
VirtualQueryEx
GlobalAlloc
TerminateProcess
GlobalFree
ResumeThread
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
VirtualQuery
RtlUnwind
Sleep
GetVersion
ExitProcess
CloseHandle
CreateMutexA
GetModuleFileNameA
WriteFile
FindAtomA
GetLocalTime
VirtualFree
GetTickCount
IsDebuggerPresent
GetThreadDesktop
SetThreadDesktop
CloseDesktop
OpenInputDesktop
FindWindowExA
FindWindowA
DispatchMessageA
GetMessageA
GetWindowThreadProcessId
CreateWindowExA
GetWindowRect
DefWindowProcA
RegisterClassExA
SetWindowsHookExA
GetCursorPos
GetFocus
EqualRect
TranslateMessage
IsWindowVisible
InflateRect
LoadCursorA
LoadIconA
GetCaretPos
CallNextHookEx
PostMessageA
wsprintfA
ClientToScreen
OpenProcessToken
RegDeleteKeyA
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
CreateProcessAsUserA
RegQueryValueExA
RegEnumValueA
SHDeleteValueA
SHSetValueA
SHGetValueA
SHDeleteKeyA
UmEInst
UmERun
UmEShutdown
UmEStartup
UmETest
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ