erc
fcsec
Static task
static1
Behavioral task
behavioral1
Sample
ef4e712ee7b620dc190fab9b3181a7b7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef4e712ee7b620dc190fab9b3181a7b7_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
ef4e712ee7b620dc190fab9b3181a7b7_JaffaCakes118
Size
25KB
MD5
ef4e712ee7b620dc190fab9b3181a7b7
SHA1
6a9ba3929d06811cd87f712d8d1fc1d13fd8df8f
SHA256
6d9c9ec963a3d4963337d7bd39a45038e0d183c918f38a5c990f6c6cbc15db64
SHA512
5a5ca5d8407a6000bdfed1d269ea7ca1967b3da8c40dd6f16a2aea0daaa7b61aa158ec7a899dd91ecc72890e147b8bb87e046eac20804d3446f8ca214c33d620
SSDEEP
384:RB5eW700uq8UaLn3be6rOxDYztUmLibU/Uo6TVqsHR7/kR6F4lZVV:L53R63beMOxDYzWGibUr68pR6F4
Checks for missing Authenticode signature.
resource |
---|
ef4e712ee7b620dc190fab9b3181a7b7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMutexA
GetCurrentProcessId
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
WriteFile
DeleteFileA
InitializeCriticalSection
VirtualProtectEx
VirtualProtect
GetPrivateProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
ReadProcessMemory
GetLastError
SetThreadContext
OpenThread
MultiByteToWideChar
TerminateProcess
CreateProcessA
VirtualAlloc
GetCurrentThreadId
GetCurrentProcess
ExitProcess
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCommandLineA
IsBadReadPtr
TerminateThread
CreateThread
GetModuleHandleA
SetUnhandledExceptionFilter
GetProcAddress
CallNextHookEx
GetWindowThreadProcessId
GetWindowTextA
_strupr
_strcmpi
_stricmp
_strlwr
??2@YAPAXI@Z
memcpy
strrchr
memset
sprintf
strcat
strcpy
strcmp
wcslen
strlen
strstr
??3@YAXPAX@Z
strncpy
strchr
__CxxFrameHandler
erc
fcsec
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ