Eith
Fde
Fxpm
Mkvcbwhq
Mqpflqh
Nt
Oeppkfhwz
Pzlbvpnv
Qmbodneezzf
Qvuenm
Rw
Uocsmypbq
Static task
static1
Behavioral task
behavioral1
Sample
2dbc78ad577c72e2f6600591fc2e6dac_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2dbc78ad577c72e2f6600591fc2e6dac_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2dbc78ad577c72e2f6600591fc2e6dac_JaffaCakes118
Size
110KB
MD5
2dbc78ad577c72e2f6600591fc2e6dac
SHA1
d69762f24882843cbafec964f02be4c3c05a199a
SHA256
502d72f7139fffcd68cc2714b8ea18f1bb22bb098dd195cd8717a19ef6a4b818
SHA512
23f352145c141d963fdf488138db559ba89ea051cd47472316ab1cdd6c4f1335370b6c3ed7aa282b88d9ef8eaf3ba8cf1320a6f5abff48ccfab7249318470f72
SSDEEP
3072:dyCb1Ts0D+KjdUEUfJ458vXOAv/FrzqzHAtkx33OKMMiU1m9:dyCumdzAXFrzqT2+OKNP
Checks for missing Authenticode signature.
resource |
---|
2dbc78ad577c72e2f6600591fc2e6dac_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
DeleteFileA
EnumResourceLanguagesW
ExitProcess
GetACP
GetCommandLineA
GetLastError
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
InterlockedIncrement
RtlUnwind
SetEndOfFile
SetErrorMode
SetLastError
TlsFree
VirtualAlloc
WritePrivateProfileSectionA
lstrcmpA
RegCloseKey
RegEnumKeyA
RegLoadKeyA
RegQueryValueA
LookupPrivilegeValueA
OleGetClipboard
OleInitialize
OleUninitialize
WriteClassStg
CoFileTimeNow
CoGetClassObject
CoInitialize
CoRegisterMessageFilter
CoCreateInstance
CoRevokeClassObject
CoUninitialize
CoTaskMemAlloc
ToAscii
ShowCursor
OffsetRect
MessageBoxIndirectA
MessageBoxA
IsCharUpperA
GetFocus
EnableWindow
DefDlgProcA
CreatePopupMenu
CreateMDIWindowA
CopyImage
CloseWindow
DialogBoxParamA
SHBindToParent
SHFileOperationA
SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc
ShellExecuteA
ShellExecuteExA
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconA
PathMatchSpecA
PathAppendA
PathCanonicalizeA
PathFileExistsA
PathFindExtensionA
PathFindFileNameA
PathIsRelativeA
StrStrIA
PathUnquoteSpacesA
__set_app_type
_errno
free
malloc
memcpy
strcmp
strlen
SysAllocStringLen
SysFreeString
SysStringLen
VariantClear
LoadTypeLib
Eith
Fde
Fxpm
Mkvcbwhq
Mqpflqh
Nt
Oeppkfhwz
Pzlbvpnv
Qmbodneezzf
Qvuenm
Rw
Uocsmypbq
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ