Install
MyNewFun
wintest
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_530169e04db97e5214f31416fb57181c.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_530169e04db97e5214f31416fb57181c.dll
Resource
win10v2004-20250129-en
Target
JaffaCakes118_530169e04db97e5214f31416fb57181c
Size
52KB
MD5
530169e04db97e5214f31416fb57181c
SHA1
a104a2177260bd3ae2969491c67f083e894cc8d2
SHA256
40e52420280967b772a5e82c24683668f350dbfe03d96864ae369aeac1c21897
SHA512
bce6eccba1cd963a70535a16ecc27cc8c8878738ad3902215aad8ac6f8e2169cfb942a448ffa2c222d75409c3c5955d410bb7261a27d86041b891c35516e707d
SSDEEP
768:K3igH/0jAUqNzUlkGvFvM8ZsVf81R7ErbW9h/wr1eQAJxd6+Y3Ch9tabBc:K3igsUUqNzUVVMtR8fE0xwqJ/6L3cclc
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_530169e04db97e5214f31416fb57181c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
BlockInput
GetDIBits
LsaFreeMemory
SHGetSpecialFolderPathA
_strnicmp
waveOutUnprepareHeader
WSAStartup
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
ImmReleaseContext
InternetReadFile
ICSeqCompressFrame
WTSFreeMemory
CreateEnvironmentBlock
EnumProcessModules
Install
MyNewFun
wintest
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE