?Xn81SLZobHz7FUpjAk6qLw5PSfkL0ssyP89MLp72mtAwaig02OMNHdLVZGwZq0oiqSFHS70utSVthWUuV8y0Q5LRLmZvOMbw4Ba@@YA_KPEAX@Z
FW1CreateFactory
Static task
static1
Behavioral task
behavioral1
Sample
0a5bf1ae63c3dde48571b23243f0ecbe_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a5bf1ae63c3dde48571b23243f0ecbe_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
0a5bf1ae63c3dde48571b23243f0ecbe_JaffaCakes118
Size
5.4MB
MD5
0a5bf1ae63c3dde48571b23243f0ecbe
SHA1
d364cce9a533d6dc1d61ce0f4d9dd496dcc5cfc6
SHA256
da24d95978e1ffa2d186d65bbc2d4d7a3a8a55cfe90c9ba6e7dbaec62c23190e
SHA512
2596c751c42921364d8ce12fcf1586cd9180ed781d708cc8e1063fe0d28481514087927e692305cf2eae9a9d1f6e757813bc6217243ff8c3f3aca6096e2b0eec
SSDEEP
49152:RZfrOJBoPChCZqbnj5P7Hp2AS4G1/yDgMf59zPxKcvHzDB6t3+C0/aJfyLg7Ie4W:i7hnFyyDgB2642o7lft7u
Checks for missing Authenticode signature.
resource |
---|
0a5bf1ae63c3dde48571b23243f0ecbe_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FreeLibrary
Sleep
LoadLibraryA
GetProcAddress
OpenFileMappingA
CreateMutexA
WaitForSingleObject
MultiByteToWideChar
GetModuleHandleA
UnmapViewOfFile
ReleaseMutex
CloseHandle
Beep
MapViewOfFile
OutputDebugStringA
WriteConsoleW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
GetStringTypeW
EncodePointer
DecodePointer
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
VirtualProtect
InitializeCriticalSection
LoadLibraryW
GetLastError
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
LoadLibraryExW
GetCurrentProcess
TerminateProcess
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetExitCodeProcess
CreateProcessW
GetFileAttributesExW
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
SetStdHandle
HeapSize
CreateFileW
RtlUnwind
SetRect
FillRect
IsWindowVisible
GetCursorPos
D3DX11CompileFromMemory
D3DReflect
D3DGetInputSignatureBlob
wglGetProcAddress
DeleteObject
GetCurrentObject
GetObjectW
CreateSolidBrush
?Xn81SLZobHz7FUpjAk6qLw5PSfkL0ssyP89MLp72mtAwaig02OMNHdLVZGwZq0oiqSFHS70utSVthWUuV8y0Q5LRLmZvOMbw4Ba@@YA_KPEAX@Z
FW1CreateFactory
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ