besakafa
coqovafaju
ebakovada
evetikaqo
nasulebavo
osusujom
risetoguhi
temexukuh
vahumaquki
wemeloma
Static task
static1
Behavioral task
behavioral1
Sample
387d7b1cc291ba544b8b201f18824b8e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
387d7b1cc291ba544b8b201f18824b8e_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
387d7b1cc291ba544b8b201f18824b8e_JaffaCakes118
Size
560KB
MD5
387d7b1cc291ba544b8b201f18824b8e
SHA1
1597f1e0c0f71052966794aac53308ac389d668d
SHA256
a7cc6562627aa882516f3e674d101e8e8fdb1f133b64687ecd9188ad43cc37c4
SHA512
05065d4cd415674c386a60c228267c05b086db8e1e3216f84bfd996d6b81552b40d21200dabbc5e296799a504ad1940e78e467722228a7a0984da9734448a2c1
SSDEEP
12288:E6HeE9v2cEE71AIA0zpsk68/U8szTjZt6WSyPkmKgk1:bObk1JXGzvabyno
Checks for missing Authenticode signature.
resource |
---|
387d7b1cc291ba544b8b201f18824b8e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
lstrlenA
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
InterlockedExchange
VirtualQuery
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
besakafa
coqovafaju
ebakovada
evetikaqo
nasulebavo
osusujom
risetoguhi
temexukuh
vahumaquki
wemeloma
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ