LepAllocJob
LepBeginJob
LepFreeJob
Static task
static1
Behavioral task
behavioral1
Sample
150669e0c0d400a5639c08d2ec14d480_JaffaCakes118.dll
Resource
win7-20240903-en
Target
150669e0c0d400a5639c08d2ec14d480_JaffaCakes118
Size
112KB
MD5
150669e0c0d400a5639c08d2ec14d480
SHA1
877983466c572caa1c4d2d68088e7d1ed31ee1fe
SHA256
1919b8880b6c71ee9ec63aee493c23f008006b003aa3e9c43637c9ec991656c0
SHA512
11906d2ab378b1efe78b09964ecf28c74d6a5b0171880c5c4aaabc8d63b9e069721722bc1f22bba2f86430e3a89ee69669f7fc977cea3631a63867e9fd010a63
SSDEEP
1536:KxSYtkvmAawsciayRLl9WLYYCRXEjRO5X844Mg4oNNfscs2U4eeWIeLKu249k+38:aSYtkvTici13es8V68z+3L8G/K
Checks for missing Authenticode signature.
resource |
---|
150669e0c0d400a5639c08d2ec14d480_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedCompareExchange
GetStdHandle
EnumSystemLocalesA
CompareFileTime
VerLanguageNameW
DeleteVolumeMountPointA
OpenFileMappingW
GlobalSize
CreateConsoleScreenBuffer
SetLocaleInfoW
GetAtomNameA
VirtualAlloc
GetLocalTime
WaitCommEvent
GetPrivateProfileIntW
CancelTimerQueueTimer
GlobalUnWire
GetVolumeInformationW
_lread
GetLongPathNameA
DeleteTimerQueueEx
CreateNamedPipeW
GlobalFree
ReadConsoleA
GetComputerNameExA
GetLastError
FindVolumeClose
DeleteCriticalSection
EscapeCommFunction
FreeLibraryAndExitThread
CreateTapePartition
VirtualProtect
ReleaseMutex
ReleaseSemaphore
FillConsoleOutputCharacterW
GetFileInformationByHandle
LocalUnlock
toupper
puts
LepAllocJob
LepBeginJob
LepFreeJob
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ