Entry
InstallM
InstallS
Static task
static1
Behavioral task
behavioral1
Sample
0063f785a411dd1c290a33edd7248362_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0063f785a411dd1c290a33edd7248362_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0063f785a411dd1c290a33edd7248362_JaffaCakes118
Size
116KB
MD5
0063f785a411dd1c290a33edd7248362
SHA1
d13539d6dfeb4279477b20f223c29677ca095682
SHA256
e5c187392b8376352880470a5068eeeb1a00926a9f06a5100a5d8426509291c6
SHA512
19a4df24c048dd8cd78af13e7e85cfc45160ade9a904acba9e4930dc3469e4b9498b2dc0f5ee4e309306d29fee7062ccc45e7e2c72aa8edc55cd000509287010
SSDEEP
1536:C16uwb1/D1QQCmtfbuIZ6c4VJhTpmu3EfFxaQiXyOl6t+txjk:C18fbuIcmuwDtYyOl6t+X
Checks for missing Authenticode signature.
resource |
---|
0063f785a411dd1c290a33edd7248362_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
lstrcmpA
SetLastError
GetTempFileNameA
GetTempPathA
SetFileAttributesA
lstrlenA
WriteFile
SetFilePointer
ReadFile
CopyFileA
GetPrivateProfileStringA
FindClose
FindNextFileA
FindFirstFileA
CreateProcessA
OpenEventA
GetVolumeInformationA
GetDriveTypeA
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
Sleep
ExitProcess
WaitForSingleObject
ResumeThread
TerminateProcess
DeleteFileA
GetEnvironmentVariableA
GetModuleHandleA
GetFileTime
GetSystemTime
SetFileTime
GetTempPathW
GetWindowsDirectoryW
GetEnvironmentVariableW
GetComputerNameW
GetTimeZoneInformation
GetLocalTime
MultiByteToWideChar
lstrcatW
lstrlenW
GetVersionExA
GetWindowsDirectoryA
CreateDirectoryA
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
lstrcpyA
CreateFileA
GetFileInformationByHandle
CloseHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetFileAttributesA
LoadLibraryExA
IsBadCodePtr
IsBadReadPtr
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
WideCharToMultiByte
HeapSize
SetUnhandledExceptionFilter
FlushFileBuffers
GetCurrentProcess
GetStartupInfoA
GetStdHandle
HeapAlloc
HeapFree
GetFileType
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
TlsAlloc
TlsFree
SetStdHandle
SetEndOfFile
SetHandleCount
RegisterClassExA
CreateWindowExA
DefWindowProcA
CharLowerBuffA
wsprintfA
wsprintfW
GetMessageA
TranslateMessage
DispatchMessageA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegCloseKey
UuidToStringA
UuidCreate
RpcStringFreeA
inet_ntoa
gethostbyname
WSAStartup
WSACleanup
Entry
InstallM
InstallS
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ