BoxieOpen
SetClassWordA
sub_100C2978
sub_100C297A
sub_100C297C
sub_100C2980
sub_100C2984
sub_100C2988
sub_100C298C
sub_100C2990
sub_100C2994
sub_100C2998
Static task
static1
Behavioral task
behavioral1
Sample
00334d2456fc3479380181e031d906c3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00334d2456fc3479380181e031d906c3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
00334d2456fc3479380181e031d906c3_JaffaCakes118
Size
40KB
MD5
00334d2456fc3479380181e031d906c3
SHA1
642796bdcaef839b928de38cd49f77176ed086ba
SHA256
a9c2725cd1d1ce342c06710b9992b2684f7afdd3ee099ae428ecd2ba1b781c95
SHA512
6aa1f677abfc78701352a78fe07a090a0d9363c7c60c15b572187f2fff58b9d6899d7e5ecddd56bb16861a7d5a887842709f73df842826fb5be2e47e88e3c2f2
SSDEEP
768:d+JQuqTbRn7/dBeg0o9gdqIbwRapbd4eS42bfZN:hHTbR7/zKoC0Ra/uZfv
Checks for missing Authenticode signature.
resource |
---|
00334d2456fc3479380181e031d906c3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTickCount
GetCurrentThreadId
VirtualAlloc
VirtualFree
MultiByteToWideChar
TlsAlloc
GetProcAddress
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapAlloc
GetProcessHeap
GetVersion
GetVersionExA
GetStringTypeW
GetStringTypeA
TerminateProcess
GetModuleHandleA
GetCommandLineA
HeapDestroy
HeapCreate
HeapFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
HeapReAlloc
TlsSetValue
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
LCMapStringA
LCMapStringW
RtlUnwind
GetSystemMetrics
RegDeleteValueW
BoxieOpen
SetClassWordA
sub_100C2978
sub_100C297A
sub_100C297C
sub_100C2980
sub_100C2984
sub_100C2988
sub_100C298C
sub_100C2990
sub_100C2994
sub_100C2998
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ