download
getidex
skipcomponents
Static task
static1
Behavioral task
behavioral1
Sample
f6dd01a3dcdbe117dee992c0c210d980_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6dd01a3dcdbe117dee992c0c210d980_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f6dd01a3dcdbe117dee992c0c210d980_JaffaCakes118
Size
19KB
MD5
f6dd01a3dcdbe117dee992c0c210d980
SHA1
e7bad88d9551aaf34cf35ee4362616b3c43fa38e
SHA256
4dd444d20f59a82c66fab9af1dc4afefc65cb5abae817cfb105bafd0d4bccd99
SHA512
c66b99a0156b2aec8017890aa2933c916ae99fcd92d1dc2c25bdc2c4fa13359491d06857015dda66a09512fb65cb8bf886fa1aa428338109ef94516801e07782
SSDEEP
384:BskdwpDr/CILhm0JVdTj6hJbwFQ8rXyKeSW1nYHj5aLz6J+vgQ:BskdU/Ch0JVJ6hJb/+XQ1YHj5gz6J+IQ
Checks for missing Authenticode signature.
resource |
---|
f6dd01a3dcdbe117dee992c0c210d980_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteFile
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
GetTempFileNameA
GetTempPathA
MulDiv
GetTickCount
CloseHandle
ReadFile
CreateFileA
DeleteFileA
WaitForMultipleObjects
WaitForSingleObject
SetFileAttributesA
SetFilePointer
GetModuleFileNameA
InterlockedExchange
RtlUnwind
GetProcAddress
lstrlenA
CreateProcessA
ExitThread
CreateThread
GetLastError
SetEvent
GlobalAlloc
lstrcpynA
lstrcpyA
CreateEventA
VirtualQuery
GlobalFree
SetWindowLongA
SetDlgItemTextA
MessageBoxA
wsprintfA
DestroyWindow
CallWindowProcA
EnableWindow
CharLowerBuffA
PeekMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
SetWindowTextA
SendMessageA
FindWindowExA
GetDlgItem
GetFocus
IsWindowVisible
ShowWindow
GetClientRect
GetWindowRect
CreateWindowExA
GetWindowLongA
CloseWindow
RegisterWindowMessageA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegEnumValueA
RegQueryValueExA
InternetConnectA
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetSetFilePointer
InternetCrackUrlA
FindCloseUrlCache
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
HttpOpenRequestA
HttpSendRequestA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
download
getidex
skipcomponents
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ