__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
093d93aa7c7419fa1ed083024493b5a5_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
093d93aa7c7419fa1ed083024493b5a5_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
093d93aa7c7419fa1ed083024493b5a5_JaffaCakes118
Size
300KB
MD5
093d93aa7c7419fa1ed083024493b5a5
SHA1
38dfb08cc0b324af32ca17ed6a13378e61c53c9a
SHA256
0aad60c4e38e3f7bbe10fd760b0bb5f46a57ded36b57f555c336dc618a95041f
SHA512
18cd716e77cc199c9723b53354058304555da73b2712c4d25a55308d3042375cb495caad6ea78c052bb02ac8fbfb02dadc530c36647541e72be1eaf80a86faf8
SSDEEP
3072:9nOIpiokvmIIFdY/mRVkjmW5slA13QcJr8oTU8u0DsuJTLHn5pCtXDMoJap:9OoXnkjmkZh2v4suJHDo
Checks for missing Authenticode signature.
resource |
---|
093d93aa7c7419fa1ed083024493b5a5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
SysFreeString
SysReAllocStringLen
SysAllocStringLen
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
LogonUserExW
SetInformationCodeAuthzLevelW
UnlockServiceDatabase
CharNextW
LoadStringW
MessageBoxW
LoadStringW
GetSystemMetrics
CharUpperBuffW
CharUpperW
CharLowerBuffW
Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
SwitchToThread
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VerSetConditionMask
VerifyVersionInfoW
SetEvent
ResetEvent
IsValidLocale
GetVersionExW
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetDiskFreeSpaceW
GetCPInfo
FreeLibrary
EnumSystemLocalesW
EnumCalendarInfoW
CreateEventW
CompareStringW
CloseHandle
GetModuleHandleA
DeleteCriticalSection
SetEndOfFile
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
NetApiBufferFree
NetWkstaGetInfo
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ