gtyes
DQCTMH
Static task
static1
Behavioral task
behavioral1
Sample
08d6bc068cf4bfcff08c8a7f69191f9a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
08d6bc068cf4bfcff08c8a7f69191f9a_JaffaCakes118
Size
96KB
MD5
08d6bc068cf4bfcff08c8a7f69191f9a
SHA1
1f457e73101e2e13874e63c5637f9db1995c1ba5
SHA256
bd97ae70914c42268202fc3f95bed2ccc544b313eee97fa863e49e71c1b3d1ad
SHA512
5c5acea1cfed380f67c736fef34a75646568a42ea0c6047caadf5fe1cecba68de01456cd78f9198e9d4bb615ace8146b1d90b0b981b8600a40df403031645d38
SSDEEP
1536:769RKJUHWYk8tUysx1wChCxT6ayZbSco4:+TvWYJtUyO5CxTs1o4
Checks for missing Authenticode signature.
resource |
---|
08d6bc068cf4bfcff08c8a7f69191f9a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
GetCommandLineA
GetCurrentThreadId
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RtlUnwind
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
gtyes
DQCTMH
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ