dhvwmhmo
mddxrdmgf
zbsxijqsowomc
Static task
static1
Behavioral task
behavioral1
Sample
124f703d88272ba2ca6b1a8053418fc7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
124f703d88272ba2ca6b1a8053418fc7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
124f703d88272ba2ca6b1a8053418fc7_JaffaCakes118
Size
1.5MB
MD5
124f703d88272ba2ca6b1a8053418fc7
SHA1
b2e42049956212eef1dc1a354788e15816398867
SHA256
aaf10f08592cf4146a9e7ce289de8531be96e5684c1fc5daa95dcfd5f2b7982d
SHA512
9a1bde92290492b7b1d6ba61cfbcec6f9ff9ab9729b1e0d6d99fc7348eec434f14aebabea21131c899b5bfb004e4c736e79bd11a59557ac504374c5256c0af53
SSDEEP
24576:dnk6epWbIJ6F3gky6Qc2VIT8Bi+3F/YXP1/0YGa9Xmg4kixSmHIr:PYiIJ6Oky6Qc2VITGi0/YXt/0x+4dxSJ
Checks for missing Authenticode signature.
resource |
---|
124f703d88272ba2ca6b1a8053418fc7_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IsBadReadPtr
TerminateProcess
LoadLibraryA
lstrcmpiA
VirtualAlloc
GetProcessHeap
HeapAlloc
GetProcAddress
WriteConsoleInputW
GetCurrentProcess
UpdateResourceA
IsCharLowerA
StrokePath
CreateCompatibleDC
EndPath
GetUserNameW
IsWellKnownSid
dhvwmhmo
mddxrdmgf
zbsxijqsowomc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ