IotwxPrvHryfaqbz
ahrGkddpkbOtfmmoOzr
bHgdbaenkXmSv
cfzzolTbYAvAW
dccewxqVjrhEdunw
dlka
ezcrXwflofntsrd
hfFvnLwzvLmkzwJ
kPbtox
pOwH
spAk
ssmutdTCbOk
wkCPl
Static task
static1
Behavioral task
behavioral1
Sample
dd0c5dcad216c18d5fa64f5e0bd59baa_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dd0c5dcad216c18d5fa64f5e0bd59baa_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dd0c5dcad216c18d5fa64f5e0bd59baa_JaffaCakes118
Size
423KB
MD5
dd0c5dcad216c18d5fa64f5e0bd59baa
SHA1
491268684995afaea24f822acae17e3610e46748
SHA256
ed0b40e1b968e68bad81475dac4b9a671462ac054092ee10735391372529a191
SHA512
cb0db17aed5086d88b70d71b605a6e03d46c2e4d4eb614f92844653c51a056f0238fd9751611a587950d14888e6fab197588039508680e35f7d592f8332e8c5c
SSDEEP
12288:IagmsopFiQuxpgvoG2OVDPRHr9ia7+d1PXEb0Mb:RgmtFi/4wGRLRxisXAM
Checks for missing Authenticode signature.
resource |
---|
dd0c5dcad216c18d5fa64f5e0bd59baa_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalPolicySection
RegisterGPNotification
VerFindFileA
GetFileVersionInfoA
VerQueryValueA
VerQueryValueW
VerInstallFileW
data_size_ndr
RpcSmSwapClientAllocFree
RpcServerUseProtseqEpA
RpcServerUseAllProtseqsIf
RpcServerUnregisterIf
RpcNetworkIsProtseqValidA
MesHandleFree
CStdStubBuffer_AddRef
WinExec
WaitNamedPipeW
VirtualFree
VirtualAlloc
VerLanguageNameA
UnlockFileEx
SetVolumeMountPointW
SetUnhandledExceptionFilter
SetLastError
SetComputerNameA
OpenMutexA
CallNamedPipeW
ConvertThreadToFiber
CreateNamedPipeW
EnterCriticalSection
EnumTimeFormatsA
ExitProcess
FindResourceA
GetACP
GetCPInfo
GetCommandLineA
GetNamedPipeHandleStateW
GlobalDeleteAtom
HeapAlloc
IsProcessorFeaturePresent
LocalFlags
_ismbcprint
_ultow
_wcslwr
atan2
_finite
iswgraph
localtime
_expand
_exit
_XcptFilter
_heapchk
RtlNtStatusToDosError
RtlQueryTimeZoneInformation
RtlSetAttributesSecurityDescriptor
RtlStartRXact
RtlpNtSetValueKey
ZwFindAtom
RtlInitializeCriticalSection
RtlCompareUnicodeString
NtReplyPort
RtlNewSecurityGrantedAccess
IotwxPrvHryfaqbz
ahrGkddpkbOtfmmoOzr
bHgdbaenkXmSv
cfzzolTbYAvAW
dccewxqVjrhEdunw
dlka
ezcrXwflofntsrd
hfFvnLwzvLmkzwJ
kPbtox
pOwH
spAk
ssmutdTCbOk
wkCPl
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ