PhotohavePorn
PoAlthough
Static task
static1
Behavioral task
behavioral1
Sample
2a445c3ed26efb6bfa52cda1e335c2da_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a445c3ed26efb6bfa52cda1e335c2da_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2a445c3ed26efb6bfa52cda1e335c2da_JaffaCakes118
Size
185KB
MD5
2a445c3ed26efb6bfa52cda1e335c2da
SHA1
64f9468749374f9811b30b78c2289f0c687a6222
SHA256
dbbf977dc6d2166b0a4448a656e4e72e9013372e3c3f0c50e356493ad0e3648e
SHA512
d9715fff0bbb416a3dfbc5136d85131c559f015ab418e8a4e9a18358766561d59d4cae4fba563feeb6ddc5e550473f7fd22a143ae3e079526a7d48c12a266f51
SSDEEP
3072:sA/e4SvwfZtc3cKqsmP420qk0bPvYKtzTPnVvfzO074BAXg/V4Co:sAe4xcLV0DPNlA5/
Checks for missing Authenticode signature.
resource |
---|
2a445c3ed26efb6bfa52cda1e335c2da_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FlushInstructionCache
IsBadStringPtrW
GetCurrentThreadId
EnterCriticalSection
InterlockedIncrement
CloseHandle
GetLastError
GetTickCount
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
InitializeCriticalSection
GetModuleHandleW
WaitForSingleObject
HeapReAlloc
LoadLibraryA
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
OutputDebugStringA
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
ExitProcess
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
LeaveCriticalSection
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
Sleep
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RegisterClassExW
LoadBitmapW
SetWindowPos
CreateWindowExW
CallWindowProcW
SetWindowsHookExW
ChildWindowFromPointEx
GetClientRect
GetCursorPos
WinHelpW
CreateBitmap
GetDeviceCaps
SelectObject
WSAStartup
select
PhotohavePorn
PoAlthough
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ