Dpw
Dtf
Duh
Hej
Hil
Kkz
Lmb
Lnl
Mra
Nqv
Qeo
Qxn
Vqz
Static task
static1
Behavioral task
behavioral1
Sample
f56c6ef0f5f7c718346bf2a5a76d9b33_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f56c6ef0f5f7c718346bf2a5a76d9b33_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f56c6ef0f5f7c718346bf2a5a76d9b33_JaffaCakes118
Size
297KB
MD5
f56c6ef0f5f7c718346bf2a5a76d9b33
SHA1
602258cefee8a4bc59c005be852d7d865a1705c3
SHA256
82053b5e5a5e84ad4014227bc1ca3aba4efe2df80ab3b4f8ce0ffca307758d1b
SHA512
798237aadac8f058a2929be5d7b532e66b1ffd1838e47333c2cd3a9dbf59d19470724bb8c73d5793ae5efdb611f4f6df191c34a9b09238aad0755347fadc7dc9
SSDEEP
6144:cbZX+V6fLiAuj6lAOS7Q1PR1ofCh3rJiuhXyeKlgjpKNP:QZX06fIq1n1yCh7Jiuhip
Checks for missing Authenticode signature.
resource |
---|
f56c6ef0f5f7c718346bf2a5a76d9b33_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
LoadTypeLib
DeleteService
InitializeSecurityDescriptor
OpenProcessToken
OpenServiceA
QueryServiceStatus
ControlService
AdjustTokenPrivileges
CloseServiceHandle
StartServiceA
StringFromGUID2
StgCreateDocfileOnILockBytes
ProgIDFromCLSID
OleUninitialize
OleDuplicateData
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
CreateBindCtx
CoRegisterMessageFilter
CLSIDFromProgID
CoLockObjectExternal
OleFlushClipboard
SetCursor
LoadImageA
LoadCursorFromFileA
EnableWindow
DrawCaption
DialogBoxParamA
DestroyCursor
DeleteMenu
CreatePopupMenu
CreateIconFromResourceEx
CreateIconFromResource
CreateAcceleratorTableA
CharNextA
DrawStateA
SHFileOperationA
SHGetFileInfoA
SHBindToParent
PathIsRelativeA
PathIsRootA
PathMatchSpecA
PathIsDirectoryA
PathUnquoteSpacesA
SHAutoComplete
StrChrA
PathFindFileNameA
PathCompactPathExA
PathQuoteSpacesA
strtol
strlen
sscanf
sprintf
__set_app_type
realloc
malloc
getenv
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
GetTimeFormatA
GetStartupInfoA
GetOEMCP
lstrlenA
Dpw
Dtf
Duh
Hej
Hil
Kkz
Lmb
Lnl
Mra
Nqv
Qeo
Qxn
Vqz
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ