fa
fc
Static task
static1
Behavioral task
behavioral1
Sample
276462523bebb852b8ce3c8e0227fac9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
276462523bebb852b8ce3c8e0227fac9_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
276462523bebb852b8ce3c8e0227fac9_JaffaCakes118
Size
9KB
MD5
276462523bebb852b8ce3c8e0227fac9
SHA1
33b52b8437d54fe79274c08c2ca25b60b979e5f5
SHA256
01968b48ed9723a8cb0b82cdeafae4de28f6af14b2b51d72d2eded3f0a4aed3f
SHA512
738d8d0e76cfe02b27f88ea0648b5acfffd351ff0f9d59f32b76372784b6af0ac2fc4eb236741b2d88d98b42a5a58fdb67a16fd60e0db24db0f00ff7c8a40a0b
SSDEEP
192:jfMKAkMsoaErbmcv7HDp8srgq/DpfK9XQgd0p:TMKAkMba6mcv798sgq/DeQgWp
Checks for missing Authenticode signature.
resource |
---|
276462523bebb852b8ce3c8e0227fac9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IsBadReadPtr
CreateThread
VirtualProtectEx
GetCurrentProcess
GetModuleFileNameA
Sleep
GetCommandLineA
GlobalFree
GetProcAddress
GetModuleHandleA
ReadProcessMemory
GlobalLock
GlobalAlloc
GetPrivateProfileStringA
GetAsyncKeyState
CallNextHookEx
ToAscii
SetWindowsHookExA
InternetCloseHandle
InternetOpenA
InternetReadFile
InternetOpenUrlA
_adjust_fdiv
malloc
_initterm
free
_stricmp
memset
strlen
memcpy
strrchr
strcpy
strcmp
strcat
sprintf
??2@YAPAXI@Z
strncpy
strstr
fa
fc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ