JqdamkqPICF
ilTEyAGm
rWbcksgfX
twxqrMbofmBt
wTqrbNX
Static task
static1
Behavioral task
behavioral1
Sample
42b05f8bddc920bdd121e654a6ff42f3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
42b05f8bddc920bdd121e654a6ff42f3_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
42b05f8bddc920bdd121e654a6ff42f3_JaffaCakes118
Size
80KB
MD5
42b05f8bddc920bdd121e654a6ff42f3
SHA1
36e27a486f1101a6d6cc481c2331c7c37fdefd23
SHA256
c0fc78edff325a697f82fc04ad2348482494fe746b234050ca35532d3049c83e
SHA512
626efa1149f799f2a4a686b2cd3a030eb1ee7e6edd5012ec48cf8da74b050f0871e4ce12a3a2a84aa22e8f69e92736a0c79336a4f4731686950a7c870255cc86
SSDEEP
1536:g0eZYbfWiLg4W3V5qwv/T339UxoRwYeRzpKDG:KZ+GlAwvxUxoOTRzo
Checks for missing Authenticode signature.
resource |
---|
42b05f8bddc920bdd121e654a6ff42f3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_except_handler3
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
RtlUnwind
SystemTimeToFileTime
SetEvent
GetVolumeInformationA
GetLocaleInfoA
GetTickCount
ReleaseMutex
MoveFileExA
GetWindowsDirectoryA
WritePrivateProfileStringA
MoveFileA
GetSystemTime
GetSystemDirectoryA
lstrcmpiA
lstrcmpA
GetVersionExA
CreateEventA
VirtualFree
ResumeThread
TerminateProcess
GlobalFree
GetThreadContext
VirtualQueryEx
LoadLibraryA
FreeLibrary
GlobalAlloc
VirtualAlloc
DeleteFileA
GetTempPathA
GetModuleFileNameA
GetLastError
CreateMutexA
WaitForSingleObject
GetProcAddress
GetModuleHandleA
ExitProcess
Sleep
GetVersion
CreateProcessA
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrcpynA
lstrlenA
lstrcpyA
GetProcessHeap
HeapFree
ReadFile
HeapAlloc
GetFileSize
OpenProcess
GetCurrentThreadId
GetTempFileNameA
GetWindowTextA
FindWindowExA
MessageBoxA
OpenInputDesktop
GetThreadDesktop
SetThreadDesktop
CloseDesktop
IsWindowVisible
GetCursorPos
ClientToScreen
InflateRect
EqualRect
GetFocus
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
CallNextHookEx
GetWindowThreadProcessId
SetWindowsHookExA
PostMessageA
FindWindowA
RegDeleteKeyA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
CreateProcessAsUserA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
SHDeleteKeyA
SHDeleteValueA
SHGetValueA
SHSetValueA
GetBkColor
GetBkMode
JqdamkqPICF
ilTEyAGm
rWbcksgfX
twxqrMbofmBt
wTqrbNX
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ