ecgwbyn
qsxemptoq
z
Static task
static1
Behavioral task
behavioral1
Sample
0d0d116cbee88137cd2b19ba49c7d108_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0d0d116cbee88137cd2b19ba49c7d108_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0d0d116cbee88137cd2b19ba49c7d108_JaffaCakes118
Size
164KB
MD5
0d0d116cbee88137cd2b19ba49c7d108
SHA1
ffcb7a0b73c7d0480456ad6e7977f58bd54cb09c
SHA256
ee269ea89eac84bcfc27649c58826b2997e8eea02327a92201e758cecfbc6dac
SHA512
8f4b2df7229b2a6cbfc69f502c77f06707434bbf8b6af7a0d06f6af392dc73e17ce279aa8b0232f6dd4eec212cff9669986b38688b189cf4bac787fa4f007183
SSDEEP
3072:xmw3qDmVyRX7hF4Nmaj1NtiA3QBujEajy:YSVVycLY3
Checks for missing Authenticode signature.
resource |
---|
0d0d116cbee88137cd2b19ba49c7d108_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
GetVersionExA
LoadResource
CloseHandle
OffsetRect
DrawCaption
CharNextA
IsCharUpperA
RegQueryValueA
RegLoadKeyA
RegEnumKeyA
RegCloseKey
ecgwbyn
qsxemptoq
z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE