CreateSecurityPage
EditSecurity
EditSecurityAdvanced
IID_ISecurityInformation
Static task
static1
Behavioral task
behavioral1
Sample
ecc94ddcac7f889fba06679317c767a1_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ecc94ddcac7f889fba06679317c767a1_JaffaCakes118
Size
1.2MB
MD5
ecc94ddcac7f889fba06679317c767a1
SHA1
75da782863c7e30f45939c0711057d37483bd437
SHA256
e06c71d9c6e770486e02dc3dc6fb9d8d640c3142b625d7a4e8ca0d99aff3b944
SHA512
f096735220bc58a172bc362aae448ac3e169418fd76a247c9d20fc814d93e8fde44e2a99e9a5a4ccac73b41dbbca3849bd7215cd4fbe8c68f26d3a512ec9444a
SSDEEP
24576:FuYfg4LhHr4NFXKJO1aUiDBvZ2+ITHmpclO9N:/9cKrUqZWLAcU
Checks for missing Authenticode signature.
resource |
---|
ecc94ddcac7f889fba06679317c767a1_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetSystemPaletteEntries
GetWindowExtEx
DeleteEnhMetaFile
GetCharWidthW
GetCharWidth32A
GetViewportOrgEx
GetTextExtentExPointI
DeregisterEventSource
GetSecurityDescriptorSacl
LookupAccountSidA
DecryptFileW
VirtualAlloc
GetCommProperties
FillConsoleOutputCharacterA
GetCurrentThread
ConvertDefaultLocale
FreeResource
GetThreadTimes
GetEnvironmentStringsW
GetThreadId
GlobalDeleteAtom
DeleteTimerQueueTimer
GetPrivateProfileStringW
GetNLSVersion
GetLastError
LoadLibraryA
lstrcmpiW
DebugActiveProcess
InsertMenuW
DrawTextW
DrawStateW
DrawIconEx
GetFileTitleW
CreateSecurityPage
EditSecurity
EditSecurityAdvanced
IID_ISecurityInformation
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ