Web_CloseMessage
Web_ShowPage
Static task
static1
Behavioral task
behavioral1
Sample
035601c9ef60a8e52bf1c8a8f49265bf_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
035601c9ef60a8e52bf1c8a8f49265bf_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
035601c9ef60a8e52bf1c8a8f49265bf_JaffaCakes118
Size
68KB
MD5
035601c9ef60a8e52bf1c8a8f49265bf
SHA1
860282a33b1fa0d2e03e318f8a4405a08106bcca
SHA256
89a1e2020e4f84ac3ac91065371ac47dafdc8d0a0127e8cac6856326bf0faf2a
SHA512
076a358aa44db3562bb925869c773f6c53cfaa68e8484e8df32df411d84075a43e1b515c7363cec95d3e585634dfc198d1c791c8cdd439e224f022a62cb1465b
SSDEEP
768:6/Kv/KT5zk3iHpKl8Q4hTegZTl/dS0vJFmWny+khjRoVkgcScmSc:62jCwKFTegZ5/dS8UkQoVkg74
Checks for missing Authenticode signature.
resource |
---|
035601c9ef60a8e52bf1c8a8f49265bf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessA
GetCurrentProcess
GetVersionExA
LoadResource
FindResourceA
FindClose
FindFirstFileA
GetModuleFileNameA
GetLastError
CloseHandle
SetFilePointer
WideCharToMultiByte
LockResource
GetEnvironmentVariableA
HeapDestroy
RtlUnwind
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersion
HeapFree
GetCPInfo
GetACP
GetOEMCP
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
TerminateProcess
HeapSize
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetUnhandledExceptionFilter
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
GetProcAddress
LoadLibraryA
SetStdHandle
FlushFileBuffers
EnumWindows
MessageBoxA
SendMessageA
GetWindowTextA
GetParent
DuplicateTokenEx
OpenProcessToken
CreateProcessAsUserA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
FindExecutableA
SHGetSpecialFolderPathA
Web_CloseMessage
Web_ShowPage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ