HostGetFlags
Malloc
Static task
static1
Behavioral task
behavioral1
Sample
f3612b92a3eab6616bae55f3482bd7d1_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f3612b92a3eab6616bae55f3482bd7d1_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f3612b92a3eab6616bae55f3482bd7d1_JaffaCakes118
Size
197KB
MD5
f3612b92a3eab6616bae55f3482bd7d1
SHA1
2494d23ad9e5195e98058f7c428391b5d756eb96
SHA256
c6ebf011f5b6f27c0903011ea4bf3027449321b7bc176c94f2499cd21c1442df
SHA512
b52b5fe0a0fbdd6001eec0ff61b7a0b1fa09a1b452394351f25a58868e0eb32e752af55de3777fc77c3b67d9d40fb1c249d0113968b4c180d2c1cd5fda3a5f32
SSDEEP
3072:M+7n3s5vj07ovpX5YSx5y1koAw/v8qbBz1Aob/gctpMIpRbnIidPi98tSdvqQpvT:zDs5L8o8Sx5yeoAwndzgiBRBd60+16L
Checks for missing Authenticode signature.
resource |
---|
f3612b92a3eab6616bae55f3482bd7d1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateConsoleScreenBuffer
CreateEventA
CreateFileA
DisableThreadLibraryCalls
ExitProcess
ExpandEnvironmentStringsA
GetACP
GetCommandLineA
GetCurrentProcess
GetDateFormatA
GetDriveTypeA
GetExitCodeThread
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessWorkingSetSize
GetStartupInfoA
GetStdHandle
GetVersion
HeapAlloc
HeapCreate
HeapReAlloc
InterlockedIncrement
MultiByteToWideChar
QueryPerformanceCounter
ReadProcessMemory
RtlUnwind
SetLastError
SetPriorityClass
SetProcessWorkingSetSize
SetStdHandle
SetUnhandledExceptionFilter
lstrcpynA
GetMenuCheckMarkDimensions
GetCursorPos
CreateDialogParamA
CoBuildVersion
CoCreateInstance
CoFileTimeNow
CoGetMalloc
CoTaskMemFree
CreateAntiMoniker
RemoveTraceCallback
PrivilegedServiceAuditAlarmW
glRasterPos4d
glTexSubImage1D
glGetTexParameterfv
HostGetFlags
Malloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ