PackagesCorrespondStandardsOverride
WherebyMechanismSMThatTo
Static task
static1
Behavioral task
behavioral1
Sample
00b26c8964bf6c20183d13867e6dbcb0_JaffaCakes118.dll
Resource
win7-20240903-en
Target
00b26c8964bf6c20183d13867e6dbcb0_JaffaCakes118
Size
224KB
MD5
00b26c8964bf6c20183d13867e6dbcb0
SHA1
ca175d4503c25d09e0e6ac5db52548ec076708e6
SHA256
eac018bc265a04c77f36c0f6c003abc32abbb120db812316a9b0eb637604373d
SHA512
660884c9e31c10efffbd90eba60ebf9271bc6b6dd821d1a9c14c2c62ef577cd13e37e4f7db7779e1c75e14447a340b3c3fb3cdf2c38760e76e3cae580f69f12c
SSDEEP
3072:0+5+tGk/EYA+rG8/SZI503BW2esjHHSS9wAutAy+uwAYnBH0X:IFXlweESS+uybtYnBH2
Checks for missing Authenticode signature.
resource |
---|
00b26c8964bf6c20183d13867e6dbcb0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
QueryPerformanceCounter
GetModuleHandleA
DisableThreadLibraryCalls
MulDiv
LocalFree
GetProfileStringW
GlobalAlloc
GlobalLock
GlobalHandle
GlobalFree
CompareStringA
SetEndOfFile
GetConsoleTitleA
FormatMessageA
GetSystemTime
lstrcatA
SetDlgItemTextW
LoadStringW
SetScrollRange
wsprintfW
SetScrollPos
GetScrollPos
memmove
PathFindExtensionW
PackagesCorrespondStandardsOverride
WherebyMechanismSMThatTo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ