QnwaYC92YYNWA1pWpg
oTm5i
Static task
static1
Behavioral task
behavioral1
Sample
11b5b491b84f84c63c2e9b6270f1adb3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11b5b491b84f84c63c2e9b6270f1adb3_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
11b5b491b84f84c63c2e9b6270f1adb3_JaffaCakes118
Size
1.9MB
MD5
11b5b491b84f84c63c2e9b6270f1adb3
SHA1
6feb11590cfaefbedcdb08806ab079b30702e2ed
SHA256
68277eafc162c251efbb59553df7877e736dd1cfbe1a6a54d596ef577377eca5
SHA512
8c8ee69b30f239532af4776a856f2fc88dc3b56b9a99b57101d19809bd31c85dae30c85eba0f84a9a80127be7f48b409e10217b7c657f12cf60bed081c84f3f9
SSDEEP
3072:2YC/7jZ5Q4RjO5tx9aoqVesVeMt+Mz6z7PEdka:RC/LZ5yX4oqVe1Ii7PE
Checks for missing Authenticode signature.
resource |
---|
11b5b491b84f84c63c2e9b6270f1adb3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatW
SetUserGeoID
CloseHandle
SetLastError
SetConsoleCursorPosition
SetConsoleCP
LocalAlloc
FindResourceExW
CoGetPSClsid
CoGetStandardMarshal
DeleteDC
RemoveFontResourceA
PathToRegion
LineDDA
IntersectClipRect
GetTextCharacterExtra
GetPolyFillMode
GetPixel
GetGraphicsMode
FillPath
ExtSelectClipRgn
DeleteObject
CreateCompatibleBitmap
SetDCBrushColor
SetMapMode
SetROP2
StrokePath
SetBkMode
AlphaBlend
SQLRemoveDefaultDataSource
QnwaYC92YYNWA1pWpg
oTm5i
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ