gvahporx
lclgtrfagbkjy
mxjtizdo
nmnskmcgqk
Static task
static1
Behavioral task
behavioral1
Sample
305a92517fdb0470b18a5447be6f803d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
305a92517fdb0470b18a5447be6f803d_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
305a92517fdb0470b18a5447be6f803d_JaffaCakes118
Size
1.7MB
MD5
305a92517fdb0470b18a5447be6f803d
SHA1
0fd79ae407826395f4fc8d6f8a160c77ee3c8f7a
SHA256
437634973bd2866d8a94bb8bbc438bfc0e8910c127ca41dc9762a85d4111af5b
SHA512
bedfee5e98e4012ec6b4cef5f1bb678f917c6bc9ddfe4fe753570d1042e1e07e28fac9598eb631c31cf55df3373ca03def996c73af19fcd5c86a3af27e2da8c1
SSDEEP
49152:6V5TVyoGHZhsmFF9O/u84iBim89u1O0EzznQEDT:4K/PsmFF9OJhBimr1twjT
Checks for missing Authenticode signature.
resource |
---|
305a92517fdb0470b18a5447be6f803d_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AssignProcessToJobObject
LoadLibraryA
VirtualAlloc
SetCurrentDirectoryA
FlushFileBuffers
GetProcAddress
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleW
Sleep
InterlockedIncrement
InterlockedDecrement
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapValidate
IsBadReadPtr
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
HeapAlloc
HeapSize
HeapReAlloc
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
RaiseException
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
CloseHandle
MapVirtualKeyW
TrackPopupMenuEx
SetPropA
StrokePath
gvahporx
lclgtrfagbkjy
mxjtizdo
nmnskmcgqk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ