mymain
nomain
Static task
static1
Behavioral task
behavioral1
Sample
2d09f88e5b2d12f6942141c8148e9a53_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2d09f88e5b2d12f6942141c8148e9a53_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2d09f88e5b2d12f6942141c8148e9a53_JaffaCakes118
Size
64KB
MD5
2d09f88e5b2d12f6942141c8148e9a53
SHA1
e882f0f27a4153a19ff47fbdbd99d64877fc13c8
SHA256
e8bd17f94b13b47609a996af9c27dd52e7e6e33d976fbd9c9c12438a38666702
SHA512
f8023d0612b21f1e454741a812be516042958b99af2b5ca70058d2fcf7b2533f0a64b8d2dfe1b7472f51bc0ec17137356b682c42220091cb544073079deadd22
SSDEEP
1536:YePTkZKUT5qq2hu0TgzP5bbT8vqtdJ6UtaCD:Yeol0huh4CtjLtaCD
Checks for missing Authenticode signature.
resource |
---|
2d09f88e5b2d12f6942141c8148e9a53_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualProtect
GetCurrentThreadId
CopyFileA
GetTickCount
GetSystemDirectoryA
ReadFile
SetFilePointer
CreateFileA
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
CreateProcessA
GetWindowsDirectoryA
WritePrivateProfileStringA
WideCharToMultiByte
lstrcatA
SetLastError
CreateThread
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
FlushFileBuffers
SetStdHandle
GetLastError
GetModuleFileNameA
CompareStringA
MoveFileA
Sleep
DeleteFileA
CloseHandle
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetCPInfo
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
HeapReAlloc
VirtualAlloc
RtlUnwind
RaiseException
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetUnhandledExceptionFilter
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
OpenInputDesktop
SetWindowsHookExA
SetProcessWindowStation
OpenWindowStationA
MapVirtualKeyA
GetKeyboardState
ToAscii
GetProcessWindowStation
wsprintfA
CallNextHookEx
GetThreadDesktop
GetUserObjectInformationA
SetThreadDesktop
CloseDesktop
RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
FreeSid
RegCreateKeyA
GetProcessMemoryInfo
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
mymain
nomain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ