ReadOwdqpoauf
SetJdrrmiglb
Fxbljyunfb
Oyupbli
Bgqlcelxrjl
Ubsbewftmgk
Rfvqsptxu
InitUnjsxfvt
Static task
static1
Behavioral task
behavioral1
Sample
efcf61a12e3cfb141ccddde2e8ecb625_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efcf61a12e3cfb141ccddde2e8ecb625_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
efcf61a12e3cfb141ccddde2e8ecb625_JaffaCakes118
Size
64KB
MD5
efcf61a12e3cfb141ccddde2e8ecb625
SHA1
12f34c7a20bf550a507908b1a639ffe85dcef37e
SHA256
e8456ff0eb5a331b1bba69dc02917a7401b88821b8fc248c0c203f3d12796f39
SHA512
ad3bbc9e1b7e8978a544210d80d2c7604c56f093f67bf577a3145ec9445494246646550d8a5dff218d536064ae6b2256eeac9099f7bb8f38411c6512177e0e00
SSDEEP
1536:3c3+M6jzkbzWacuK3+M+ALTbfPI26VW5BVfs:s2jEtcfHLP4zErVf
Checks for missing Authenticode signature.
resource |
---|
efcf61a12e3cfb141ccddde2e8ecb625_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetPrivateProfileSectionA
IsBadStringPtrA
OpenJobObjectA
LoadLibraryExA
GetVersionExA
VirtualProtectEx
lstrlen
SetUserGeoID
WriteConsoleOutputCharacterA
WriteProfileStringA
GetFileAttributesA
FindVolumeMountPointClose
GetProcessWorkingSetSize
Heap32ListFirst
GetConsoleTitleA
CreateDirectoryA
VirtualAlloc
GetSystemDefaultLCID
GetSystemWindowsDirectoryA
SetConsoleInputExeNameA
CreateDirectoryExW
HeapUnlock
GetProcessHeaps
GetCommandLineA
GetCurrentProcess
RaiseException
SetUnhandledExceptionFilter
SetViewportOrgEx
SHGetSpecialFolderPathA
timeGetTime
timeBeginPeriod
ReadOwdqpoauf
SetJdrrmiglb
Fxbljyunfb
Oyupbli
Bgqlcelxrjl
Ubsbewftmgk
Rfvqsptxu
InitUnjsxfvt
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ