IchFromXRaw
NxCloseCooking
Static task
static1
Behavioral task
behavioral1
Sample
24d52bc8b94dd200461e3d5989fc605f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
24d52bc8b94dd200461e3d5989fc605f_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
24d52bc8b94dd200461e3d5989fc605f_JaffaCakes118
Size
168KB
MD5
24d52bc8b94dd200461e3d5989fc605f
SHA1
a07837a1bbd6e54e17cbbe7d095e6ba6dcb7cd54
SHA256
b46479d65032cfb37bcdf2ac58dd7b8afa9898665a21d6a58e00229d87e435f2
SHA512
bfb2be0c5c82ea3ddacd018dd40e5142fe247a1f5dc6fc7299ae986df7be09542735c507a1c0550ee08ad1a96376a874b7796a3b30875fb43b7a21421eadbaff
SSDEEP
3072:DxS8AvLYis3kGwhLBgkIa2lYrtsb1Ht5DMQTBsB3:DxS8mNs3kfBU7MQTBsB
Checks for missing Authenticode signature.
resource |
---|
24d52bc8b94dd200461e3d5989fc605f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
DuplicateHandle
ExitProcess
FileTimeToSystemTime
FindResourceA
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetTimeZoneInformation
GlobalReAlloc
HeapAlloc
HeapCreate
HeapReAlloc
MultiByteToWideChar
OpenProcess
RtlUnwind
SetErrorMode
SetLastError
SetUnhandledExceptionFilter
UnmapViewOfFile
WriteConsoleA
__p__commode
__set_app_type
_except_handler3
exit
strpbrk
wcscpy
__getmainargs
IsZoomed
DeleteMenu
ChildWindowFromPoint
BeginPaint
CheckMenuRadioItem
CreateBindCtx
CoTaskMemAlloc
CoGetMalloc
CoCreateInstance
IchFromXRaw
NxCloseCooking
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ