ImportAccounts
ImportMailAndAddresses
MigrateAccountEx
MigrateOMIAccountsEx
SilentImport
Static task
static1
Behavioral task
behavioral1
Sample
da467a1f6a0a8ac379a2b1723aa8f848_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
da467a1f6a0a8ac379a2b1723aa8f848_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
da467a1f6a0a8ac379a2b1723aa8f848_JaffaCakes118
Size
52KB
MD5
da467a1f6a0a8ac379a2b1723aa8f848
SHA1
1c92451ef8dc1f4da7459e168bc98d255a7477d0
SHA256
ac54c1cb93415c819b7febcb33562eda20704a1d0e22f94bc5b4e5172b8cc256
SHA512
812931f0f4125fd8594f13a5be48c58e20a04e877454548ef76049f0a0ad5b136f22ad0f9643f40223356475dffae912410b500aefc0e3dedc167a897eb2e1d0
SSDEEP
768:Zy0HI/1w4SPjAWNxjYYbOuEwYVIG1uuosBZhTqN06Jya/4KwB/0KU5QYGfBkfbzB:d4qsWNxTOuyIuZ3T6JyxKdHZzL1Ykxhf
Checks for missing Authenticode signature.
resource |
---|
da467a1f6a0a8ac379a2b1723aa8f848_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
atoi
CoFileTimeNow
GetDC
Escape
SHGetMalloc
FreeSid
ord9525
ImportAccounts
ImportMailAndAddresses
MigrateAccountEx
MigrateOMIAccountsEx
SilentImport
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE