EndKey
StartKey
Static task
static1
Behavioral task
behavioral1
Sample
5267bb353eb1e30349bd36e6b2b01222_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5267bb353eb1e30349bd36e6b2b01222_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
5267bb353eb1e30349bd36e6b2b01222_JaffaCakes118
Size
52KB
MD5
5267bb353eb1e30349bd36e6b2b01222
SHA1
3f73bbcf2344f08e0be212306049e6078c2a57e5
SHA256
a819b3636632906bff78558f5eaf0de8c0b447b200cf9e91ae9441d1d53bad32
SHA512
22a7da714d5de856e6dddbe22968b828d7771c0f05de70011471ef827667f4d725d95a26676cb942207f34f4d783839f0c68fc296362d175dd9678e18f48669d
SSDEEP
768:leK6v2XgTN++X10ITlygOxkj8BEWqq5DkAgeDuoQYknEe9:le7v2INB6ITlZO6SE7qDuoQrnX9
Checks for missing Authenticode signature.
resource |
---|
5267bb353eb1e30349bd36e6b2b01222_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetProcAddress
HeapReAlloc
VirtualAlloc
LCMapStringA
LoadLibraryA
GetWindowsDirectoryA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetCommandLineA
GetVersion
GetLastError
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
CreateFileA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
FlushFileBuffers
SetStdHandle
SetEndOfFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LCMapStringW
UnhookWindowsHookEx
SetWindowsHookExA
GetFocus
GetActiveWindow
GetParent
GetWindowTextA
GetKeyNameTextA
CallNextHookEx
ImmGetCompositionStringA
ImmReleaseContext
ImmGetContext
EndKey
StartKey
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ