Entry
InstallM
InstallS
Static task
static1
Behavioral task
behavioral1
Sample
e825c4961293ad45883cd52f38695283_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e825c4961293ad45883cd52f38695283_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e825c4961293ad45883cd52f38695283_JaffaCakes118
Size
116KB
MD5
e825c4961293ad45883cd52f38695283
SHA1
f4cd497a51043b65935220c205e818c6966ea2ba
SHA256
7759a16584847737c650b7051514c1aa58c957cbfaaa4bc609b288a87d55f2ce
SHA512
9d87c0fd1bbd97670283e3f6ffc4e741402a85966e81c867bd2e70b817568b50cb8392ad7db96e885dbad38424707622a297aea9efebfc5dbe5436188bebf0de
SSDEEP
1536:C16uwb1/D1QQCmtfbuIZ6c4VJhTpmu3EfFxaQiXyOl6t+txFk:C18fbuIcmuwDtYyOl6t+X
Checks for missing Authenticode signature.
resource |
---|
e825c4961293ad45883cd52f38695283_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
lstrcmpA
SetLastError
GetTempFileNameA
GetTempPathA
SetFileAttributesA
lstrlenA
WriteFile
SetFilePointer
ReadFile
CopyFileA
GetPrivateProfileStringA
FindClose
FindNextFileA
FindFirstFileA
CreateProcessA
OpenEventA
GetVolumeInformationA
GetDriveTypeA
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
Sleep
ExitProcess
WaitForSingleObject
ResumeThread
TerminateProcess
DeleteFileA
GetEnvironmentVariableA
GetModuleHandleA
GetFileTime
GetSystemTime
SetFileTime
GetTempPathW
GetWindowsDirectoryW
GetEnvironmentVariableW
GetComputerNameW
GetTimeZoneInformation
GetLocalTime
MultiByteToWideChar
lstrcatW
lstrlenW
GetVersionExA
GetWindowsDirectoryA
CreateDirectoryA
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
lstrcpyA
CreateFileA
GetFileInformationByHandle
CloseHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetFileAttributesA
LoadLibraryExA
IsBadCodePtr
IsBadReadPtr
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
WideCharToMultiByte
HeapSize
SetUnhandledExceptionFilter
FlushFileBuffers
GetCurrentProcess
GetStartupInfoA
GetStdHandle
HeapAlloc
HeapFree
GetFileType
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
TlsAlloc
TlsFree
SetStdHandle
SetEndOfFile
SetHandleCount
RegisterClassExA
CreateWindowExA
DefWindowProcA
CharLowerBuffA
wsprintfA
wsprintfW
GetMessageA
TranslateMessage
DispatchMessageA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegCloseKey
UuidToStringA
UuidCreate
RpcStringFreeA
inet_ntoa
gethostbyname
WSAStartup
WSACleanup
Entry
InstallM
InstallS
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ