?Is_KBD_Disabled@@YAHXZ
?T3_KBD_Disable@@YAHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
0cdea622cb86b541a68b600a52a098d5_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0cdea622cb86b541a68b600a52a098d5_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
0cdea622cb86b541a68b600a52a098d5_JaffaCakes118
Size
1.1MB
MD5
0cdea622cb86b541a68b600a52a098d5
SHA1
84babcfb412307be179042f71754a80efe6f3c56
SHA256
ab58ac16330aa737c2daafe4baeeade0fd3b6b2997a6a088fced1c23521ff545
SHA512
e9049fcba2f327bb8cbed19ed8d87e788ca8c405ae7f50897d160d1619142e31c6b54f1fcb91592bb411ea6fab8a31072ac4eda99975acea2b80bb906057d848
SSDEEP
12288:pgSlFeESryNJz44qk71m0WuCsXghj2wQi8UuDdUuDNBjTDz:p3JSWNJh1m0oZhXQiYDJD
Checks for missing Authenticode signature.
resource |
---|
0cdea622cb86b541a68b600a52a098d5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImageDirectoryEntryToData
GetCurrentProcess
OpenProcess
Module32Next
Module32First
CreateToolhelp32Snapshot
Process32Next
Process32First
FindClose
FindFirstFileA
HeapFree
ReadFile
HeapAlloc
GetProcessHeap
GetFileInformationByHandle
CreateFileA
GetSystemDirectoryA
LocalFree
Thread32Next
SuspendThread
ResumeThread
Thread32First
Sleep
TerminateThread
TerminateProcess
FreeLibrary
LoadLibraryA
GetVersionExA
UnmapViewOfFile
DuplicateHandle
CreateFileMappingA
SizeofResource
LockResource
GetTempPathA
LoadResource
FindResourceA
WriteFile
CreateDirectoryA
VirtualQuery
ExitProcess
ReadProcessMemory
GetFileAttributesA
VirtualAlloc
GetPrivateProfileStringA
GetPrivateProfileIntA
FreeResource
GetTickCount
lstrcatA
GetCurrentDirectoryA
CreateThread
CompareStringW
CompareStringA
SetEndOfFile
GetTimeZoneInformation
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
SetLastError
CloseHandle
GetModuleHandleA
GetProcAddress
VirtualProtect
IsBadReadPtr
InitializeCriticalSection
MapViewOfFile
CreateFileW
WriteConsoleA
HeapSize
SetEnvironmentVariableA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetLastError
RtlUnwind
GetCurrentThreadId
GetCommandLineA
DeleteCriticalSection
FatalAppExitA
VirtualFree
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
InterlockedExchange
GetStringTypeA
GetStringTypeW
SendMessageA
GetWindowThreadProcessId
GetAsyncKeyState
GetActiveWindow
MessageBoxA
FindWindowA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
GetSecurityInfo
GetUserNameA
SetEntriesInAclA
SetSecurityInfo
RegCreateKeyExA
ShellExecuteA
InternetOpenUrlA
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetReadFile
InternetCloseHandle
?Is_KBD_Disabled@@YAHXZ
?T3_KBD_Disable@@YAHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ