Gsx
Hid
Nvf
Pcw
Shi
Sws
Viz
Wqw
Ydo
Ylv
Static task
static1
Behavioral task
behavioral1
Sample
1678be0cc4bb451b7bb2d47121bbe221_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
1678be0cc4bb451b7bb2d47121bbe221_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
1678be0cc4bb451b7bb2d47121bbe221_JaffaCakes118
Size
128KB
MD5
1678be0cc4bb451b7bb2d47121bbe221
SHA1
ac8db6f5e71ef8356058623e7913c2f1570a6b21
SHA256
ad55cc75630d540d4eee906ab93c8a6c78a16139f8797bddb8ac56048459423d
SHA512
501f57baa4d254ae735cd4f49338a9a17b76b11e13a07b71039545d788c8023f5a87dc66259411b6a2e50bebaed5ce2b5dea58f1bb394c3e3a7f0fad0a1eeea0
SSDEEP
3072:q22lPPXby+F2YOQ3vWRWXcQHPxBwhnIiYYGW0KMMiU1m9:AP/FtVWgzHPnuYYGW0KNP
Checks for missing Authenticode signature.
resource |
---|
1678be0cc4bb451b7bb2d47121bbe221_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
LoadTypeLib
CloseServiceHandle
CreateServiceA
DeleteService
InitializeSecurityDescriptor
OpenServiceA
QueryServiceStatus
SetSecurityDescriptorDacl
AdjustTokenPrivileges
CoCreateGuid
CLSIDFromProgID
CoRegisterClassObject
CoTaskMemAlloc
CreateDataAdviseHolder
OleGetClipboard
OleSetClipboard
ProgIDFromCLSID
RegisterDragDrop
WriteClassStm
CoGetClassObject
lstrcatA
UnmapViewOfFile
SetEndOfFile
LeaveCriticalSection
GetStartupInfoA
FlushFileBuffers
Gsx
Hid
Nvf
Pcw
Shi
Sws
Viz
Wqw
Ydo
Ylv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ