ceqohegew
emojucogil
helamepeke
imimoceyay
luqinihox
racajito
ulexuhawu
vekizuwule
wafukicu
Static task
static1
Behavioral task
behavioral1
Sample
1139e2d6b91b12e962d60cd1d0b0d257_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1139e2d6b91b12e962d60cd1d0b0d257_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
1139e2d6b91b12e962d60cd1d0b0d257_JaffaCakes118
Size
572KB
MD5
1139e2d6b91b12e962d60cd1d0b0d257
SHA1
8a8898a956852b8326322c7c7f58d45287196f7d
SHA256
f15820d76cdc12401b2faf90c40d3b21e06837aebc6227e7bb56b89e1983e84c
SHA512
5b2f8cab482ba7c1296e0e9a4b3cc6fbedaf03cf45b9029bf2c84fe809ec49031d4a1f8e115e1d4102043a216a75dd07f748fe75000f1909df9d7f834ce603e0
SSDEEP
12288:zG15XDbO8FgwxIv5byiEtvjnbkhNrCliP+RKoql4u:m9vO8XxgyiEt7nYSlqeqx
Checks for missing Authenticode signature.
resource |
---|
1139e2d6b91b12e962d60cd1d0b0d257_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
InterlockedExchange
VirtualQuery
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
ceqohegew
emojucogil
helamepeke
imimoceyay
luqinihox
racajito
ulexuhawu
vekizuwule
wafukicu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ