check
copy
run
Static task
static1
Behavioral task
behavioral1
Sample
fc4c8313320cf0d5073bb087d261c5c3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc4c8313320cf0d5073bb087d261c5c3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fc4c8313320cf0d5073bb087d261c5c3_JaffaCakes118
Size
32KB
MD5
fc4c8313320cf0d5073bb087d261c5c3
SHA1
ffcc5180821dc6027cafba6fa0f57f08846cf309
SHA256
f4c8c3a4a1d440aa4232222ba4c37b09c5021da657f3042e53bd7865253c8f1d
SHA512
3c582d84ca57e6ef97d8a4f94df3e656580efe41c4aeed6e8dda935ec12bde463f4aff04c61305856503118b7c52f92add5c285560cf2c4a0445cd801f26cdb1
SSDEEP
384:+kNj8bq1KwWRLx8JjUqCrhB+5xFCKOKd295YIc865r+7PkBpo:sGnWRN8JAqN5xF+Kdy5YIc8eCPkBO
Checks for missing Authenticode signature.
resource |
---|
fc4c8313320cf0d5073bb087d261c5c3_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapFree
HeapReAlloc
GetFileAttributesA
GetTempPathA
MultiByteToWideChar
GetTickCount
CloseHandle
WriteFile
ReadFile
CreateFileA
lstrcatA
lstrcmpA
SystemTimeToFileTime
GetSystemTime
HeapAlloc
CreateEventA
GetModuleHandleA
GetProcAddress
PulseEvent
GetProcessHeap
FreeLibrary
LoadLibraryA
GetLastError
GlobalFree
GlobalAlloc
lstrcpynA
lstrcpyA
SetFilePointer
RegisterWindowMessageA
SetWindowLongA
SetDlgItemTextA
MessageBoxA
SetWindowTextA
AnyPopup
EndPaint
ShowWindow
IsChild
BeginPaint
SendMessageA
GetDlgItem
GetFocus
GetClientRect
GetWindowRect
CreateWindowExA
GetWindowLongA
CreateWindowExW
EnableWindow
DestroyWindow
CallWindowProcA
wsprintfA
IsWindowVisible
RegQueryValueExA
RegOpenKeyA
RegCloseKey
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetSetFilePointer
check
copy
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ