gevurosapu
ikebovoj
ireqaxuha
ixewupogil
kobilevoji
ogeyituzor
osutunoq
vivapubabi
yepogadize
Static task
static1
Behavioral task
behavioral1
Sample
fae84b0ab93aa80a6fcd4f6352d5178c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fae84b0ab93aa80a6fcd4f6352d5178c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fae84b0ab93aa80a6fcd4f6352d5178c_JaffaCakes118
Size
572KB
MD5
fae84b0ab93aa80a6fcd4f6352d5178c
SHA1
c0e4217f618cf65da4a703f08bfd4ca3b012c044
SHA256
481d93513bdb5c52292a32cc3e024b0df27b9d12fb4c0e9f1ef2290337bd1394
SHA512
a629a3cf3290198ed04c97c6dc1e30437a0b34192358c985f52bbaa6aa9efd0276da0acd4ed606786e791a590909331ae276cd0fccd55978c4f990331b38202a
SSDEEP
12288:Paqkp2ETlsTkerp9H95z1KdDPABRkYciwXLj1HUSfY:vLEZ/g3HJKlDiijRUSf
Checks for missing Authenticode signature.
resource |
---|
fae84b0ab93aa80a6fcd4f6352d5178c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
gevurosapu
ikebovoj
ireqaxuha
ixewupogil
kobilevoji
ogeyituzor
osutunoq
vivapubabi
yepogadize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ