?goObyxpEipjzhmyWIvn@@YGPAGPAE@Z
?zHrWwgvyOvO@@YGPADPAN@Z
?lVyxtVvuAilnV@@YGFDPAD@Z
?nuuewmabOmrDgJokBqUHz@@YGJPAK@Z
?whLvwkxfoh@@YGHPANE@Z
?njdnHGsnrBJluoYfne@@YGXPAEPAE@Z
?IUjgzaecwikl@@YGFPAEPAD@Z
Static task
static1
Behavioral task
behavioral1
Sample
140f4091e5edad10b29a7caea707aa96_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
140f4091e5edad10b29a7caea707aa96_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
140f4091e5edad10b29a7caea707aa96_JaffaCakes118
Size
48KB
MD5
140f4091e5edad10b29a7caea707aa96
SHA1
7f7a7ca0675d7c02b588c5a669558345190006b0
SHA256
88fabf2adfc1c35b6a95cd4e666b7e618a4878a782e7404d825b2d29b0e16243
SHA512
a30a99ecc7bba6f95eeadc14cb1be383b75375026a0c10d406fbb2bdf4e505f16c048fc49144df0b177e3ae3aa42efe86c569bae1958d899478726bbe8d30d1b
SSDEEP
768:ddQxgm7dbno0A9/BZlbhCwiUT2tAktU64k5VB4RxqP1/:dd+7dbOBwtAkuhk5EqP1/
Checks for missing Authenticode signature.
resource |
---|
140f4091e5edad10b29a7caea707aa96_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalFindAtomW
GetSystemTimeAsFileTime
lstrlenA
GetFileInformationByHandle
GetShortPathNameA
VerifyVersionInfoW
lstrcatW
GetOverlappedResult
CreateNamedPipeA
RemoveDirectoryA
FormatMessageA
SetEvent
SetPriorityClass
PathAddBackslashA
ReplaceTextW
PrintDlgW
StartDocW
RoundRect
Polygon
PathToRegion
SetViewportExtEx
TextOutA
GetCursorPos
DrawFrameControl
InvalidateRect
ModifyMenuW
GetWindowRect
GetLastActivePopup
CreatePopupMenu
GetActiveWindow
wsprintfA
LoadStringA
UnloadKeyboardLayout
GetMonitorInfoW
LoadAcceleratorsA
?goObyxpEipjzhmyWIvn@@YGPAGPAE@Z
?zHrWwgvyOvO@@YGPADPAN@Z
?lVyxtVvuAilnV@@YGFDPAD@Z
?nuuewmabOmrDgJokBqUHz@@YGJPAK@Z
?whLvwkxfoh@@YGHPANE@Z
?njdnHGsnrBJluoYfne@@YGXPAEPAE@Z
?IUjgzaecwikl@@YGFPAEPAD@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ