Ayu
Ckq
Cmt
Doj
Flg
Ihc
Isv
Jib
Odg
Omf
Oqu
Qru
Sdx
Xjh
Static task
static1
Behavioral task
behavioral1
Sample
2f65ea3317e833a171e8615d124e2f04_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f65ea3317e833a171e8615d124e2f04_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2f65ea3317e833a171e8615d124e2f04_JaffaCakes118
Size
112KB
MD5
2f65ea3317e833a171e8615d124e2f04
SHA1
424ffc8c5761247e2dacc3546587c245e6912206
SHA256
a5e0a5f9014d0817c6db9e971d19d2846004101f8821c13ec69981af44f98382
SHA512
cdaadf53f0728ce4519947e36624726af76894509ff2ad281753a998dc3b5881015bbad6261c6a62b9ad3d3db97e1f0abd523c91aed1cdf4bdc87b92735227c1
SSDEEP
3072:SE0Uzslw8YUsGKZus1xpMhZ0QGlKMMiU1m9:SpPlLsHh2pGlKNP
Checks for missing Authenticode signature.
resource |
---|
2f65ea3317e833a171e8615d124e2f04_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
LoadTypeLib
OpenProcessToken
OpenSCManagerA
QueryServiceStatus
StartServiceA
CreateServiceA
AdjustTokenPrivileges
ControlService
StgCreateDocfileOnILockBytes
RevokeDragDrop
OleSetClipboard
OleIsCurrentClipboard
OleGetClipboard
OleDuplicateData
GetConvertStg
DoDragDrop
CreateFileMoniker
RegisterDragDrop
CreateDataAdviseHolder
CreateBindCtx
CoResumeClassObjects
CoGetMalloc
ShowOwnedPopups
EndDialog
EnableWindow
DialogBoxParamA
DestroyCursor
DestroyCaret
DefDlgProcA
CreateMDIWindowA
CreateIcon
ChangeMenuA
BeginPaint
LoadCursorFromFileA
SHFileOperationA
SHGetFileInfoA
SHGetMalloc
SHBindToParent
SHAutoComplete
StrChrA
PathUnquoteSpacesA
PathCanonicalizeA
PathAppendA
PathQuoteSpacesA
PathIsRootA
PathIsRelativeA
PathFindExtensionA
PathCompactPathExA
vsprintf
strchr
sscanf
strstr
memmove
memcpy
malloc
__set_app_type
free
fflush
rand
lstrcmpA
lstrcatA
WriteFile
VirtualFree
VirtualAlloc
TlsSetValue
GetLocalTime
lstrcmpiA
Ayu
Ckq
Cmt
Doj
Flg
Ihc
Isv
Jib
Odg
Omf
Oqu
Qru
Sdx
Xjh
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ