ManagerShortCut
ManagerShortCutEx
ManagerShortCutEx2
UnInstall_OldKw
Static task
static1
Behavioral task
behavioral1
Sample
16da2adf047d536d3b1b739efd4092b8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16da2adf047d536d3b1b739efd4092b8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
16da2adf047d536d3b1b739efd4092b8_JaffaCakes118
Size
36KB
MD5
16da2adf047d536d3b1b739efd4092b8
SHA1
1ea5d24b4ff9277537dff48a9af1d3e4a4558c0e
SHA256
7fc540f9a513e0b6bb23d1701604c816c10f622f8cc92e3ed671a67fe60996a4
SHA512
96fba8961acb16dc61f3da99876aa24af0a24f8da3b079811b87ab644d24e68562df1256af1af69e5fe1ec0b8f662a3e36afb4df083c81e249fc3cb86b33a16f
SSDEEP
384:9bZMgUMKskP9JoT6dmARDt6mlBgy9Ficd35FV2lWOIJyhG:tSssJoT6Q6Des53nYlWOIJWG
Checks for missing Authenticode signature.
resource |
---|
16da2adf047d536d3b1b739efd4092b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
DeleteFileA
RemoveDirectoryA
CreateDirectoryA
GetSystemDirectoryA
GetSystemDefaultLangID
WideCharToMultiByte
GetEnvironmentStrings
FreeEnvironmentStringsW
RtlUnwind
GetStringTypeW
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
MultiByteToWideChar
FreeEnvironmentStringsA
LCMapStringW
GetStringTypeA
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
GetProcAddress
LoadLibraryA
LCMapStringA
SHGetSpecialFolderPathA
CoInitialize
CoCreateInstance
ManagerShortCut
ManagerShortCutEx
ManagerShortCutEx2
UnInstall_OldKw
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ