fa
fc
Static task
static1
Behavioral task
behavioral1
Sample
2c9390be706b71f233a86478339c1093_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2c9390be706b71f233a86478339c1093_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2c9390be706b71f233a86478339c1093_JaffaCakes118
Size
10KB
MD5
2c9390be706b71f233a86478339c1093
SHA1
3b98ca9af1ba753f055732a369724050ab32e240
SHA256
19afc04537dbfb2b96618e756fc69c1aece8cb02dea843d76fae7e888ad12724
SHA512
9ffe97e81bd6734e9e6e49bf3fa459f910929de4f32f37472d6365f19f58433d848c8a2659fd5d9d6fa45da0589d3039339ad33a9a9923fdb6f81510377c44a1
SSDEEP
192:t24CA8vlUAluK2Ywl/+pfK35KmG3oDvu:shA8vlUAluKUlmM5KmG3oDu
Checks for missing Authenticode signature.
resource |
---|
2c9390be706b71f233a86478339c1093_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
Sleep
VirtualProtectEx
GlobalFree
ReadProcessMemory
WideCharToMultiByte
GlobalAlloc
IsBadReadPtr
GetPrivateProfileStringA
GetProcAddress
GetModuleHandleA
CreateThread
GetModuleFileNameA
GlobalLock
GetCurrentProcess
CallNextHookEx
SetWindowsHookExA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
_adjust_fdiv
malloc
_stricmp
_initterm
free
strcat
strrchr
??3@YAXPAX@Z
strcpy
??2@YAPAXI@Z
sprintf
strlen
strncpy
strchr
strstr
fclose
fread
fopen
memset
memcpy
strcmp
fa
fc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ