Fny
Fzm
Gye
Jaj
Mfk
Mnc
Qwh
Tqp
Vam
Vgv
Xbn
Xqd
Ygl
Static task
static1
Behavioral task
behavioral1
Sample
db5a0330ecad6d5ba187f961c14aec72_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db5a0330ecad6d5ba187f961c14aec72_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
db5a0330ecad6d5ba187f961c14aec72_JaffaCakes118
Size
125KB
MD5
db5a0330ecad6d5ba187f961c14aec72
SHA1
6db7e32ebb851350ed62a627e471d24c9e09fadb
SHA256
1fbd55bae619175c8ff6b73503c3d50b53281a88b49132c8627907db4f6d575d
SHA512
d381fdae17ce84b3cfb4fb3395e1a319aa719faa6026d21ec3ab36aa148a34d70fb82f136982720d27b544c78f35a4789267265278b934c28af73e3bd6e7dc52
SSDEEP
3072:hA70tA460elCt+Jijt9rA5i5QMNXJiJxqTKMMiU1m9:hZA9l2+JijnH5PXJiaTKNP
Checks for missing Authenticode signature.
resource |
---|
db5a0330ecad6d5ba187f961c14aec72_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
LoadTypeLib
ControlService
StartServiceA
OpenProcessToken
SetSecurityDescriptorDacl
QueryServiceStatus
WriteFmtUserTypeStg
GetRunningObjectTable
GetConvertStg
CoDisconnectObject
CreateDataAdviseHolder
CreateBindCtx
CoTaskMemAlloc
CoGetMalloc
CoGetClassObject
SetCursor
MessageBoxIndirectA
DrawIcon
DefDlgProcA
ShowOwnedPopups
SHGetFileInfoA
SHBindToParent
SHFileOperationA
PathFindExtensionA
PathCompactPathExA
PathCanonicalizeA
PathIsDirectoryA
PathQuoteSpacesA
PathUnquoteSpacesA
time
strstr
sprintf
memchr
rand
fflush
malloc
vsprintf
TlsSetValue
lstrcatA
lstrcpyA
RaiseException
LocalAlloc
GetDateFormatA
FreeResource
FlushFileBuffers
EnumResourceLanguagesA
ReadFile
Fny
Fzm
Gye
Jaj
Mfk
Mnc
Qwh
Tqp
Vam
Vgv
Xbn
Xqd
Ygl
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ