Mryxmyxmqb
Pllwendnb
Nmwfegkxn
IsWhoxhvgqfs
WriteSdyxwfwxk
Eskeooo
ReadTclypcdcan
BeginPtfstqgfxgn
Static task
static1
Behavioral task
behavioral1
Sample
e1702b8a0dd0fd33f44a88ce650822da_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1702b8a0dd0fd33f44a88ce650822da_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e1702b8a0dd0fd33f44a88ce650822da_JaffaCakes118
Size
68KB
MD5
e1702b8a0dd0fd33f44a88ce650822da
SHA1
382301a31fbd33d3df91118956aac4b357cf005e
SHA256
186fa3abccdc5932eb02d6603e499499bd283795937b675aaa9373cb6aad29db
SHA512
021dac859c01d0437b62ff7d7e4cd50c402775a4136c64b11d96e109d747b04f824bff3aeee6dd1bbe1532cd5b08a5837f93b384302c1a3c3577c2a3ccd8e9ee
SSDEEP
1536:oCKZhvThVsnKacWzTTQ1wSHuxiYwt20b1y:oLhrhVsn1bT2PHugYwt2q1
Checks for missing Authenticode signature.
resource |
---|
e1702b8a0dd0fd33f44a88ce650822da_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ResetEvent
RaiseException
GetPrivateProfileStructA
SetThreadContext
ReleaseMutex
SetComputerNameExW
GetConsoleOutputCP
GetThreadTimes
VirtualAllocEx
GetVolumePathNamesForVolumeNameA
OpenThread
GetLogicalDrives
GetEnvironmentStringsA
GetCurrentDirectoryA
GetSystemDirectoryA
GetProcessHeaps
OpenMutexA
GetCPInfoExA
IsValidCodePage
ReplaceFile
SetEvent
CopyFileExA
SetSystemTimeAdjustment
LocalAlloc
TermsrvAppInstallMode
FtpRemoveDirectoryW
InternetUnlockRequestFile
InternetCrackUrlA
ResumeSuspendedDownload
InternetQueryDataAvailable
InternetGetConnectedStateExA
FtpSetCurrentDirectoryW
FtpSetCurrentDirectoryW
Mryxmyxmqb
Pllwendnb
Nmwfegkxn
IsWhoxhvgqfs
WriteSdyxwfwxk
Eskeooo
ReadTclypcdcan
BeginPtfstqgfxgn
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ