_AssignRelativeData@12
_CreateRelativeData@4
_DeleteRelativeData@16
_GetSizeOfRelativeData@4
_SeekRelativeData@4
Static task
static1
Behavioral task
behavioral1
Sample
2e9d48885e9425edaeaaf9904be3b34f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e9d48885e9425edaeaaf9904be3b34f_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2e9d48885e9425edaeaaf9904be3b34f_JaffaCakes118
Size
100KB
MD5
2e9d48885e9425edaeaaf9904be3b34f
SHA1
60849feae08c49a2dc610d8819d8c719676d3e69
SHA256
e822977f65ecf725a0287e9ea421486433176bcae79c6ac1fce7d8a828ce299d
SHA512
4c8e620e681b2fb425ddb607205c1c8b162dccd55b17fd9c9c20d3390148ffcd2b8178c4d8d2c716f0b744e101806898eddf0c33b9ef4025de1bc548abf9322b
SSDEEP
1536:2kMmDuz/24zEWTYZBxImN10lxoCKR2cd8ZVtb/m88saBrFRk3HvyvQjcGN7+2T68:2kzA24z3Mg0R2C89bu8DorFcyojcit5
Checks for missing Authenticode signature.
resource |
---|
2e9d48885e9425edaeaaf9904be3b34f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileType
LockResource
GetModuleHandleA
LocalSize
CloseHandle
LocalFree
SuspendThread
ResumeThread
SetFileAttributesA
GetProcAddress
FreeLibrary
InterlockedExchange
GetLastError
LoadLibraryA
RaiseException
LocalReAlloc
GetFileAttributesA
HeapDestroy
GetProcessHeap
LockFile
UnlockFile
CompareFileTime
SystemTimeToFileTime
GlobalAddAtomA
LoadResource
GetCommandLineW
FindResourceW
lstrcmpA
FindResourceA
lstrcpyA
GetSystemTime
VirtualProtectEx
MulDiv
SetFileTime
ExpandEnvironmentStringsA
GetModuleHandleW
SetEnvironmentVariableW
GetCurrentProcess
GetFileInformationByHandle
WaitForMultipleObjects
LocalAlloc
IsCharAlphaNumericA
GetWindow
SetClipboardViewer
UpdateWindow
GetClipboardViewer
SetWindowPos
SetCursorPos
MessageBoxA
GetDC
OpenIcon
EndPaint
SetWindowRgn
DrawTextW
GetParent
IsWindowEnabled
SetParent
BeginPaint
TranslateMessage
GetWindowTextW
PeekMessageA
TranslateAcceleratorA
SetClassLongA
GetWindowRgn
CreateWindowExW
DispatchMessageA
ValidateRgn
CallWindowProcA
SetWindowTextW
SetMessageQueue
GetMessageTime
GetMessagePos
GetClassLongA
MoveWindow
GetWindowLongW
GetClassWord
SwitchToThisWindow
DPtoLP
GetCharWidthA
GetTextMetricsW
SetDCPenColor
Chord
GetPixel
RestoreDC
GetDeviceCaps
UnrealizeObject
DeleteObject
CreateCompatibleDC
GetObjectW
GetDCPenColor
SetTextJustification
RevertToSelf
ImpersonateNamedPipeClient
ImpersonateSelf
GetOldestEventLogRecord
GetEventLogInformation
DeregisterEventSource
WriteEncryptedFileRaw
CloseEncryptedFileRaw
GetTokenInformation
ReportEventW
_AssignRelativeData@12
_CreateRelativeData@4
_DeleteRelativeData@16
_GetSizeOfRelativeData@4
_SeekRelativeData@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ