Com
DScript
Dec
Ini
M2M
Static task
static1
Behavioral task
behavioral1
Sample
04570e606cbf1a8566d567e803cb5766_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04570e606cbf1a8566d567e803cb5766_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
04570e606cbf1a8566d567e803cb5766_JaffaCakes118
Size
152KB
MD5
04570e606cbf1a8566d567e803cb5766
SHA1
6fbd798d37b097f578ae91a46e5a701e632a73b7
SHA256
a8e643161103ef2013ca10971d096144bdf4312e5f0e847afc001bbebcab17d1
SHA512
dd3ab26d5857e36171b3ab2809c7927bde6fd1a2859a979f249fe26275c0d064c06bad85ec84361d7f5774a9f16d943ea43d803e98d33ef91e08a9a013de8265
SSDEEP
3072:FXp3tWSuXqOimFCOD3dGXdx/Qx3casHb+0wuhSrk:pjdu6OimFBdM/2sXCQv
Checks for missing Authenticode signature.
resource |
---|
04570e606cbf1a8566d567e803cb5766_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
Sleep
CloseHandle
WriteFile
CreateFileA
DeleteFileA
GetTickCount
FreeLibrary
SetEndOfFile
SetFilePointer
CreateThread
GlobalLock
GlobalAlloc
TerminateThread
LoadLibraryA
CreateEventA
GetVersion
ReadFile
GetFileSize
MoveFileA
PulseEvent
GetVolumeInformationA
GetDriveTypeA
GlobalFree
GlobalUnlock
MessageBoxA
PostMessageA
wsprintfA
_strlwr
_stricmp
__CxxFrameHandler
_adjust_fdiv
_initterm
strstr
fwrite
fseek
fread
atol
atof
exit
sprintf
_ftol
free
malloc
fclose
fopen
Com
DScript
Dec
Ini
M2M
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ