NkBnhe
JuTqeivkZfhafj
YiHalnfctQqpohqrOvs
XfPkldiLdoy
Static task
static1
Behavioral task
behavioral1
Sample
dc6e39e39178368db37318acc29bb296_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc6e39e39178368db37318acc29bb296_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dc6e39e39178368db37318acc29bb296_JaffaCakes118
Size
120KB
MD5
dc6e39e39178368db37318acc29bb296
SHA1
a4233321344aba5c8da726c8d0029db2e7f55ff2
SHA256
09044d2aed86f4576e66f8cf2b114f5b7b57d5f486a72c287d686b54e34299ac
SHA512
8cac681191091443e12f83776a4ba97783b49363a745ffd35be154071c37712d0cba52435a6d2cf97338e212e660edc2a6d6a8da8acd9b10b6ab5f7c185f6468
SSDEEP
3072:kg68tTNsRcL/PHos4MTSH5rP3sLf3KpnThZ+tJOcE:C8tT4cL/PLTaNn0OcE
Checks for missing Authenticode signature.
resource |
---|
dc6e39e39178368db37318acc29bb296_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileType
LoadLibraryA
SetEndOfFile
GetEnvironmentStringsW
GetTempFileNameW
CreatePipe
GetLastError
HeapDestroy
LocalFileTimeToFileTime
GetModuleHandleA
lstrcpyW
FlushFileBuffers
VirtualFree
GlobalAlloc
GlobalReAlloc
VirtualAlloc
GetProcAddress
CloseHandle
GlobalUnlock
VirtualAlloc
ExitProcess
UnhandledExceptionFilter
GetCommandLineW
__getmainargs
wcstol
memcpy
exit
_wcsnicmp
towupper
wcstok
__CxxFrameHandler
_onexit
wcsstr
__setusermatherr
_CxxThrowException
memset
fclose
strcpy
__dllonexit
wcschr
_except_handler3
_c_exit
toupper
_wtol
__winitenv
_wtoi
realloc
atoi
_wcsicmp
_vsnprintf
wcsncpy
strchr
DialogBoxParamA
SetForegroundWindow
MessageBoxW
GetWindowTextLengthW
RegisterDeviceNotificationA
TranslateMessage
LoadStringW
GetFocus
SetWindowLongW
IsWindow
SetTimer
PostMessageA
KillTimer
GetDlgItemInt
GetParent
RegisterClipboardFormatW
SelectObject
SetTextColor
CreateSolidBrush
CreateCompatibleDC
TranslateCharsetInfo
SetStretchBltMode
StretchBlt
CreateBitmap
CreateCompatibleBitmap
PatBlt
SetBkMode
CreateFontIndirectA
GetStockObject
RestoreDC
glTexCoord1sv
NkBnhe
JuTqeivkZfhafj
YiHalnfctQqpohqrOvs
XfPkldiLdoy
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ