b
iqbainob
nqvdkdvx
ws
Static task
static1
Behavioral task
behavioral1
Sample
0edbd08a07da6b3708a4faa7e5b4b372_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0edbd08a07da6b3708a4faa7e5b4b372_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0edbd08a07da6b3708a4faa7e5b4b372_JaffaCakes118
Size
160KB
MD5
0edbd08a07da6b3708a4faa7e5b4b372
SHA1
fd8934d6a819c1867059f57898fde13c2774efe7
SHA256
e91029d849d90b6b0984a85f5d04cdffa905563072d0b0845638b92fc6ef86d7
SHA512
a19663b436a990f9d603cf42af86426d73f44606703656d29b6f3764fae62b84e5f05fc0615a0126f484c3d6360a8ba56fb988511b5aea5b0e49dcfa4995e821
SSDEEP
3072:dyd0CdipDD75TO2XIOHvVfRW5ZaFr6lY:RCWDDVy2YO9fU5Wml
Checks for missing Authenticode signature.
resource |
---|
0edbd08a07da6b3708a4faa7e5b4b372_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTimeFormatA
ReadFile
SetEndOfFile
CloseHandle
OemToCharA
EndPaint
CreateMenu
CharToOemA
LoadAcceleratorsA
RegOpenKeyExA
RegLoadKeyA
RegEnumKeyA
RegCloseKey
b
iqbainob
nqvdkdvx
ws
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE