EngineCtl
EngineInfo
InitEngine
Static task
static1
Behavioral task
behavioral1
Sample
e7bf0073b434f9f785fd0dc6e1e19b04_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e7bf0073b434f9f785fd0dc6e1e19b04_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e7bf0073b434f9f785fd0dc6e1e19b04_JaffaCakes118
Size
59KB
MD5
e7bf0073b434f9f785fd0dc6e1e19b04
SHA1
02f68f62bc3dc9bc1d4c8c9ac75e8077ed778b1d
SHA256
97394501443472bd64fbfcfc849f3e20cde4629d9e006fa89fc220e2eefc2d95
SHA512
d5b5305a90291647e6eb3327ba551d1ec46c11327d24161e3a2ae9b45626c90ef6231b9bc8c160dca5828eeacf8dc36ae6551f46f2c75749f3320dda34ab2678
SSDEEP
1536:bGUVKDIR6wkZvGzkcglZM+LZvEZLNj84wl:YDQ5kcyvFEVifl
Checks for missing Authenticode signature.
resource |
---|
e7bf0073b434f9f785fd0dc6e1e19b04_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrCmpNA
StrNCatA
StrToIntA
StrStrIA
StrStrA
wnsprintfA
InternetCloseHandle
InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
inet_ntoa
gethostbyname
WSAStartup
WSACleanup
GetSystemInfo
GetSystemTimeAsFileTime
QueryPerformanceCounter
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LCMapStringW
RtlUnwind
GetCommandLineA
FlushInstructionCache
WriteProcessMemory
VirtualAlloc
ReadProcessMemory
VirtualProtect
IsBadCodePtr
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetModuleHandleA
lstrlenA
lstrcpynA
lstrcatA
HeapFree
CloseHandle
WriteFile
ReadFile
HeapAlloc
GetProcessHeap
CreateFileA
lstrcmpA
lstrcpyA
GetCurrentProcessId
GetCurrentThreadId
GlobalFree
GlobalAlloc
MultiByteToWideChar
lstrcmpiA
VirtualQuery
GetTickCount
WideCharToMultiByte
GetVersionExA
FindClose
FindFirstFileA
GetFileSize
CreateToolhelp32Snapshot
Process32Next
Process32First
HeapReAlloc
Sleep
GetLastError
CreateMutexA
HeapDestroy
HeapCreate
IsBadReadPtr
CreateThread
TlsGetValue
TlsSetValue
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
TerminateProcess
TlsFree
TerminateThread
DisableThreadLibraryCalls
TlsAlloc
SetUnhandledExceptionFilter
Thread32Next
SuspendThread
Thread32First
ResumeThread
InterlockedExchange
HeapSize
InitializeCriticalSection
GetCPInfo
GetOEMCP
GetACP
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
VirtualFree
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
SetLastError
ExitProcess
RegisterWindowMessageA
SetWindowLongW
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
ShowWindowAsync
IsWindowUnicode
PostMessageA
SendMessageA
FindWindowA
SetWindowLongA
GetWindowLongA
CallWindowProcW
CallWindowProcA
FindWindowExA
IsWindowVisible
GetWindowRect
IsWindow
GetWindowTextA
RegisterClassExA
GetSystemMetrics
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
KillTimer
ShowWindow
SetForegroundWindow
UpdateWindow
RegisterClassA
CreateWindowExA
SetTimer
DestroyWindow
DefWindowProcA
SetWindowPos
EnumWindows
GetWindowThreadProcessId
GetClassNameA
GetClientRect
wsprintfA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegCreateKeyExA
ExtractIconExA
OleCreate
OleUninitialize
OleInitialize
OleSetContainedObject
VariantInit
SysAllocString
VariantClear
EngineCtl
EngineInfo
InitEngine
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE