ClearUserAssociations
QueryAppIsDefault
QueryAppIsDefaultAll
QueryCurrentDefault
SetAppAsDefault
SetAppAsDefaultAll
Static task
static1
Behavioral task
behavioral1
Sample
05df8c0534e215db9bb0bfd40f7427c5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05df8c0534e215db9bb0bfd40f7427c5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
05df8c0534e215db9bb0bfd40f7427c5_JaffaCakes118
Size
501KB
MD5
05df8c0534e215db9bb0bfd40f7427c5
SHA1
9162dcd6de6b6d9267ee9be4b2b1908141a921f5
SHA256
cd5481717185eeefc0a4abff33f2f6ed201109f8d5011472200ecf517d096e0e
SHA512
645e25d7b9bfc989bd556b9837185a1b44f339013d5e1574a8655b62a41c33228344da1a9da9854fa9f9a2eeb4c0851db6c13de9657eba97cee1c210aa4f308d
SSDEEP
6144:KjKUJDJFOFm++Wzmqs69OjD6OjAA4XdYgSpfB04+a:MKUJDJUFm++7qd4DPjAA4XdYgqfB
Checks for missing Authenticode signature.
resource |
---|
05df8c0534e215db9bb0bfd40f7427c5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpiW
GlobalFree
lstrcpyW
lstrcpynW
GlobalAlloc
wsprintfW
CoCreateInstance
CoTaskMemFree
ClearUserAssociations
QueryAppIsDefault
QueryAppIsDefaultAll
QueryCurrentDefault
SetAppAsDefault
SetAppAsDefaultAll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ