?ulprnEnableDeviceControl@@YAXK@Z
?ulprnGetPreviewWindowHandle@@YAPAUHWND__@@XZ
?ulprnHasPreviewRange@@YAHXZ
?ulprnHasUseDevice@@YAHXZ
?ulprnLaunch@@YAHVCString@@0P6AHHJ@ZH@Z
Static task
static1
Behavioral task
behavioral1
Sample
dd4a4af85bf76a9f5c2cc465e08a5c16_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dd4a4af85bf76a9f5c2cc465e08a5c16_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dd4a4af85bf76a9f5c2cc465e08a5c16_JaffaCakes118
Size
16KB
MD5
dd4a4af85bf76a9f5c2cc465e08a5c16
SHA1
b82cfef4532771cd8425b2241078189f01308d75
SHA256
960094b7b92f601c7d17d19051923f8d6c474891102be2c1356d5426869f4159
SHA512
f0b1aa4982e4952ccdb72618bc2b1ca68feb359648b82e68b3eb1b33edda39fa76b2d9baffd09024455d23549c6aeb544e02c1ce3b853e6628c2a5dc023e2931
SSDEEP
384:DBt9eaGxHuUx8Ipv7JFfb2WLVzMRLr39KLC7vvxlL+:DBtUjNf1FT2sMVrb7D+
Checks for missing Authenticode signature.
resource |
---|
dd4a4af85bf76a9f5c2cc465e08a5c16_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
ord4407
free
SetTimer
BitBlt
?ulprnEnableDeviceControl@@YAXK@Z
?ulprnGetPreviewWindowHandle@@YAPAUHWND__@@XZ
?ulprnHasPreviewRange@@YAHXZ
?ulprnHasUseDevice@@YAHXZ
?ulprnLaunch@@YAHVCString@@0P6AHHJ@ZH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE