Txrjsxfle
Oyykxusz
FCnjhdaccvye
Static task
static1
Behavioral task
behavioral1
Sample
3c12cd86784268d310e871773f0abbd1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c12cd86784268d310e871773f0abbd1_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3c12cd86784268d310e871773f0abbd1_JaffaCakes118
Size
22KB
MD5
3c12cd86784268d310e871773f0abbd1
SHA1
6b849bbd49d9221d16a697a86032f50614c8a07a
SHA256
6a39897de461431529d9ab74e576cd3332d352f3c3d80e845c32b85b623676e8
SHA512
02483ca24e32c07ef07885e44f585b5b922aafacdc76af693b29d9b866c986f6ee39f96b61f90fe5d444f7671d179a03b3f8d146dfd82cbfcc2190fb601f24c6
SSDEEP
192:Brx3vCCPp9TCjU47maLPOtNyc497YO6Fs8dHkmXJRpd5k2ShzmsypvahUq:T3KCPXyU46d/9ZFs8dHXJsrdmlpvW
Checks for missing Authenticode signature.
resource |
---|
3c12cd86784268d310e871773f0abbd1_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
CompareStringA
GetModuleHandleA
ExitProcess
HeapAlloc
VirtualFree
GetCurrentProcess
GetCommandLineA
lstrcpy
GetProcessHeap
DisconnectNamedPipe
GetLongPathNameA
GetTrusteeTypeW
RegEnumKeyExA
GetSecurityDescriptorControl
GetMultipleTrusteeOperationA
ConvertAccessToSecurityDescriptorA
ConvertSecurityDescriptorToAccessW
InitializeSid
VerFindFileW
GetFileVersionInfoSizeA
GetFileVersionInfoW
VerQueryValueA
VerQueryValueW
VerLanguageNameA
VerInstallFileA
GetFileVersionInfoSizeW
VerFindFileA
VerInstallFileW
VerLanguageNameW
GetFileVersionInfoA
HBRUSH_UserFree
IsEqualGUID
CoUnmarshalInterface
IsValidInterface
CoInitialize
CLIPFORMAT_UserSize
CoMarshalInterThreadInterfaceInStream
HENHMETAFILE_UserMarshal
_mbsinc
__toascii
iswlower
_CIpow
_aexit_rtn
CreateScalableFontResourceA
SetROP2
GetCharABCWidthsFloatA
SetArcDirection
CreateHalftonePalette
GdiSetLastError
DeviceCapabilitiesExA
RtlFormatMessage
NtRestoreKey
ZwRequestPort
LdrVerifyImageMatchesChecksum
NtReplyWaitReceivePort
NtSetEvent
NlsMbOemCodePageTag
NtAllocateVirtualMemory
RtlPrefixUnicodeString
Txrjsxfle
Oyykxusz
FCnjhdaccvye
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ