lTWYBsC
EHjINVL
AYTaJwLw
eSQtHf
RFAZeOo
Static task
static1
Behavioral task
behavioral1
Sample
4671305c05210126b9bf50ee3acfea5a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4671305c05210126b9bf50ee3acfea5a_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
4671305c05210126b9bf50ee3acfea5a_JaffaCakes118
Size
137KB
MD5
4671305c05210126b9bf50ee3acfea5a
SHA1
e06c25a476aa6da7349f8b1d99c241fcd5a4b94a
SHA256
deb5e88a956b929d68c3f6b1418e34ad19cc3aa12c6c2dcf4cc9b94a0b78a1a3
SHA512
ff106154fadd56c04c932e791baf9ae0bd6e799b64d880594e8e871c3a8021893870f037d5e8ebd22face938386dad0d0d4a74744b19e42329bf59c88c8f0078
SSDEEP
3072:q6pdCPWAkCZa1g8IWAzGisCgLW7N5btIqhQYlpch1l12YgRoFsogoF6Fyqti:TCmCI17KG5A5btdlqh1f2YQpog9EJ
Checks for missing Authenticode signature.
resource |
---|
4671305c05210126b9bf50ee3acfea5a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
InterlockedDecrement
VirtualFree
ExitProcess
WideCharToMultiByte
LocalAlloc
GetModuleHandleA
LoadLibraryA
SetFilePointer
GetCurrentProcessId
GetDlgItem
RegisterClassExW
SetDlgItemTextW
IsWindowVisible
GetSysColor
EnableMenuItem
GetStockObject
GetObjectW
CreateBitmap
CreateCompatibleBitmap
LineTo
lTWYBsC
EHjINVL
AYTaJwLw
eSQtHf
RFAZeOo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ