NP_GetEntryPoints
NP_GetMIMEDescription
NP_Initialize
NP_Shutdown
Static task
static1
Behavioral task
behavioral1
Sample
e990e8839428e748da96b117c2c5c8f8_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e990e8839428e748da96b117c2c5c8f8_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e990e8839428e748da96b117c2c5c8f8_JaffaCakes118
Size
90KB
MD5
e990e8839428e748da96b117c2c5c8f8
SHA1
487fecac119a19b27f90ab1a835338917100d13c
SHA256
3f56b667cb684a9f89a3631773ecb84c5e4e99a48bf03171ef9ec67c70951683
SHA512
afa2345c6502d4549ff196a100d5fcb0f23db991198ccf6deb68e1e755ba53bda51b7a489ff8415991ea97fa4c257096386156b7ed7dda6f7fafbe2b08cd4359
SSDEEP
1536:mgTqBX6TiS8zUctsE5Fg+3KyIIozSae7epGb5DzaT:mVBTlzUcADzSaaGGb5Dzw
Checks for missing Authenticode signature.
resource |
---|
e990e8839428e748da96b117c2c5c8f8_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrStrIA
wnsprintfA
HttpQueryInfoA
HttpOpenRequestA
InternetGetConnectedState
HttpSendRequestA
InternetCrackUrlA
HeapAlloc
GetCurrentProcess
HeapFree
WaitForSingleObject
SleepEx
GetProcessHeap
WriteFile
TerminateThread
Sleep
CreateProcessA
GetProcAddress
FreeLibrary
CreateMutexA
ReleaseMutex
CloseHandle
GetTempPathA
LocalFree
CreateThread
GetVolumeInformationA
lstrcpyA
GetSystemTimeAsFileTime
lstrlenA
lstrcmpA
CreateFileA
HeapReAlloc
GetLocaleInfoA
FlushFileBuffers
LoadLibraryA
IsDebuggerPresent
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetCurrentThreadId
GetCommandLineA
GetLastError
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
HeapSize
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
RegDeleteValueA
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegQueryValueExA
GetLengthSid
DuplicateTokenEx
ConvertStringSidToSidW
SetTokenInformation
OpenProcessToken
RegOpenKeyA
ShellExecuteA
NP_GetEntryPoints
NP_GetMIMEDescription
NP_Initialize
NP_Shutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ