DriverProc
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
f5c23ecfaa48b19fa29602b14814714b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5c23ecfaa48b19fa29602b14814714b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f5c23ecfaa48b19fa29602b14814714b_JaffaCakes118
Size
36KB
MD5
f5c23ecfaa48b19fa29602b14814714b
SHA1
f874717b6e80e038b4094654227825435d495b77
SHA256
328471026155e60ec7214a7d3a5e45af50aa69d17d7fbc756feadee1281b9029
SHA512
59e6ad439cbde99c19756642bc7546222e16ca609298d0ae4365bccc8297032e21026ec7df8846548ff570b46bb5a30658a9283b23a0d8a19bc494ecab6321cb
SSDEEP
384:WWorEITdowf/Sppk2qOgw6K3ebbhRK10FRy/X+7t3KhJPSXy40XFIowx/ZujiWZS:9S3E8w6K3EbcS42EPAy1FIo4/ZSFI6i
Checks for missing Authenticode signature.
resource |
---|
f5c23ecfaa48b19fa29602b14814714b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord561
ord815
ord1979
ord5442
ord5773
ord665
ord5186
ord354
ord800
ord6877
ord941
ord537
ord823
ord1085
ord860
ord540
ord3663
ord3571
ord3626
ord640
ord2414
ord5785
ord1641
ord1640
ord323
ord2859
ord2393
ord5311
ord5572
ord2915
ord535
ord939
ord858
ord2139
ord5922
ord2554
ord3738
ord1168
ord5207
ord2818
ord668
ord798
ord5465
ord2764
ord1997
ord5448
ord3318
ord5194
ord533
ord3178
ord4058
ord2781
ord2770
ord356
ord6385
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord4486
ord6375
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord389
ord2512
ord4274
ord802
ord542
ord3215
ord825
ord1116
sprintf
strrchr
strstr
__CxxFrameHandler
_adjust_fdiv
fclose
fwrite
fopen
strncpy
malloc
_initterm
free
??1type_info@@UAE@XZ
_onexit
__dllonexit
_access
LocalFree
CopyFileExA
CreateFileA
ExitProcess
LoadLibraryA
GetProcAddress
DeleteFileA
FreeLibrary
GetTempPathA
GetTickCount
SetEvent
ResetEvent
Sleep
WaitForSingleObject
TerminateThread
GetCommandLineA
GetModuleFileNameA
CopyFileA
CreateEventA
CreateThread
GetCurrentProcess
VirtualProtectEx
OutputDebugStringA
WriteProcessMemory
GetCurrentProcessId
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
GetWindowTextA
GetDesktopWindow
GetDC
GetForegroundWindow
GetDIBits
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
GetObjectA
URLDownloadToFileA
DeleteUrlCacheEntry
DriverProc
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ