IsNosoiftakoj
Uvvugxex
Cihjrwnwb
ClosePgeqonpkv
AddBwhderpss
BeginWrxajrlqr
EndInpvhpyxcs
Tjbkpcikym
Static task
static1
Behavioral task
behavioral1
Sample
2d9e56ee50b3543def0024c2a6a59fe1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d9e56ee50b3543def0024c2a6a59fe1_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2d9e56ee50b3543def0024c2a6a59fe1_JaffaCakes118
Size
68KB
MD5
2d9e56ee50b3543def0024c2a6a59fe1
SHA1
e1c089df7d310179aaddd69a1e03bb2ea5a2685c
SHA256
b778ed4e1264a99d7198baf64f1200caa55ac3f81c5f99674f7ee619030c2e29
SHA512
e81de509d239ab465dd8cba5a7f7bd1d5871a6f9f8ff8b6508bc2e32a7a0b3859c983c8a1a656e9e6c2b797a3fd4cdf7ab7f3d93cacf5980c34492d448085a2e
SSDEEP
1536:Km11Chnlvv1rEKywKyNSeiLi//E0az2lxPlSGHKot51y:bC5ln1rEKywK2SeiAC2jPLHl51
Checks for missing Authenticode signature.
resource |
---|
2d9e56ee50b3543def0024c2a6a59fe1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ReleaseSemaphore
ResetEvent
ReleaseMutex
SetEvent
GetConsoleAliasesLengthA
GetCurrentDirectoryA
GetProcessShutdownParameters
SetFileApisToOEM
OpenJobObjectA
VirtualAllocEx
RaiseException
EnumTimeFormatsA
GetProcessPriorityBoost
GetDateFormatA
FindResourceA
SetErrorMode
SetConsoleCtrlHandler
FindFirstFileExW
CancelWaitableTimer
DebugBreak
GlobalWire
LZCopy
MoveFileA
GetThreadTimes
InternetQueryDataAvailable
InternetGetConnectedStateExA
FtpSetCurrentDirectoryW
InternetCrackUrlA
ResumeSuspendedDownload
FtpRemoveDirectoryW
InternetUnlockRequestFile
FtpSetCurrentDirectoryW
IsNosoiftakoj
Uvvugxex
Cihjrwnwb
ClosePgeqonpkv
AddBwhderpss
BeginWrxajrlqr
EndInpvhpyxcs
Tjbkpcikym
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ