ddd
fxxdc
Static task
static1
Behavioral task
behavioral1
Sample
da49636f48406629fc8363aeef0e9320_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da49636f48406629fc8363aeef0e9320_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
da49636f48406629fc8363aeef0e9320_JaffaCakes118
Size
26KB
MD5
da49636f48406629fc8363aeef0e9320
SHA1
4a7102d6d47b2129a904037368d040e605cbb57a
SHA256
6098292c0c4fafed8877dd97077951a0391fbfd88469318bbf4a33092fbf0bef
SHA512
f019116f75aad26638ef284459d5a44a0939c306002444a546e57083254b4dfaccdf2c9f37506eb7d0a8ce9eb3e6bbe2c0ccd39e34e6b9f3c3d6b15fdccf79ea
SSDEEP
768:TRg2a2UdDDO/CQsGkgHVw9SJGtrZ8M+xxS0U:TRg2adTHZgHWP
Checks for missing Authenticode signature.
resource |
---|
da49636f48406629fc8363aeef0e9320_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
GetLastError
CreateMutexA
GetCurrentProcessId
GetPrivateProfileStringA
GetModuleHandleA
ReadProcessMemory
SetUnhandledExceptionFilter
SetThreadContext
OpenThread
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
TerminateProcess
CreateProcessA
VirtualAlloc
LoadLibraryA
ExitProcess
GetSystemDirectoryA
GetCurrentThreadId
CreateFileA
WriteFile
DeleteFileA
InitializeCriticalSection
VirtualProtectEx
VirtualProtect
LeaveCriticalSection
EnterCriticalSection
WriteProcessMemory
SetFilePointer
ReadFile
CloseHandle
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCommandLineA
IsBadReadPtr
TerminateThread
CreateThread
GetCurrentProcess
GetForegroundWindow
GetWindowTextA
GetWindowThreadProcessId
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
FindWindowA
InternetCloseHandle
InternetReadFile
wcslen
_stricmp
_strupr
_strlwr
_strcmpi
_strnicmp
strcmp
fopen
fread
fclose
sprintf
??2@YAPAXI@Z
memcpy
strrchr
memset
strcat
strcpy
strlen
atoi
??3@YAXPAX@Z
strncpy
strchr
strstr
ddd
fxxdc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ