ecgwbyn
qsxemptoq
z
Static task
static1
Behavioral task
behavioral1
Sample
37f50aefb983edb342b972bab622d2f8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
37f50aefb983edb342b972bab622d2f8_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
37f50aefb983edb342b972bab622d2f8_JaffaCakes118
Size
88KB
MD5
37f50aefb983edb342b972bab622d2f8
SHA1
8af83f8c3a106564c66201c8cd71b5fecf9c70b6
SHA256
1e3660581a5b9841224d361e730338e7e0c7ec8d898e3c3813688f2bee5084b0
SHA512
9d22b65f781ed079b99c5a753347292d51f28a7c966503b7439ad8b6d3eb7238444beb641f81fdf8c5623e519fd3623906c9e9332a1dfa532f3d355170c0e34d
SSDEEP
1536:xoLn7yVOCwVXEUt10pHsZ8gwRf4x9C10Qmp3kwlIdl2uXhvYDYB7vzXW:x8CwVX7t10pywuxs1mp3kwlIdMuZSY1a
Checks for missing Authenticode signature.
resource |
---|
37f50aefb983edb342b972bab622d2f8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
OffsetRect
RegQueryValueA
ecgwbyn
qsxemptoq
z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE