Done
EnumImageDataInItemNext
EnumImageItemPropertyReset
Static task
static1
Behavioral task
behavioral1
Sample
eeaaa3854043d8e5082d542e79a4e93b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eeaaa3854043d8e5082d542e79a4e93b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
eeaaa3854043d8e5082d542e79a4e93b_JaffaCakes118
Size
248KB
MD5
eeaaa3854043d8e5082d542e79a4e93b
SHA1
3d277cae733547326b9cf3aecb252603b95c83e9
SHA256
2709cb2f371c914a5c012ae5f1dd5139cb0a8ea68ebe54d9419d982922e534a1
SHA512
e72a7d64c3cf1cdd47f3a3ff8d51bd010f3009b750f31fdbd253592dd5c3b6fa3011e4ee798eafd45577ddcc7ec64fab1bcb76d3e3162a881f4809a52a1780b0
SSDEEP
6144:+XBZ2uVMxMxrgY04r+W5eajBQdmYiTeyD7p3VkNJugJ2:6ZbMxMxrz+WMeQdmYiTZ7p36ruA2
Checks for missing Authenticode signature.
resource |
---|
eeaaa3854043d8e5082d542e79a4e93b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegDeleteKeyA
VariantCopyInd
VarDateFromDec
SafeArrayGetElemsize
SysStringLen
VarCyFromDec
VarDecNeg
CoGetClassVersion
CoRegisterMallocSpy
CoTaskMemRealloc
OleCreateLinkToFile
StgCreateDocfile
CLSIDFromProgIDEx
ImmUnregisterWordA
ImmReleaseContext
ImmReSizeIMCC
ImmIsIME
ImmGetVirtualKey
ImmGetCompositionFontW
ImmEnumInputContext
SetFileAttributesW
UnmapViewOfFile
VirtualProtectEx
lstrcatW
lstrlenA
AddConsoleAliasW
CompareFileTime
CreateJobObjectW
EnumDateFormatsExA
EnumDateFormatsExW
ExitProcess
ExpandEnvironmentStringsW
FindFirstVolumeMountPointW
GetBinaryTypeA
GetCommConfig
GetCommandLineA
GetDateFormatA
GetFileSizeEx
GetModuleHandleA
GetTapeParameters
GetVersionExA
GlobalLock
HeapAlloc
HeapCreate
InitializeCriticalSection
IsBadReadPtr
IsBadWritePtr
LocalReAlloc
Module32FirstW
ReadFileEx
ReplaceFileW
PropertySheetA
RtlInitString
RtlDestroyEnvironment
Done
EnumImageDataInItemNext
EnumImageItemPropertyReset
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ