DeinitServerExtension
GetExtensionName
InitServerExtension
ReflectiveLoader
Static task
static1
Behavioral task
behavioral1
Sample
20eee7635a7776124e9cbcf278805981_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
20eee7635a7776124e9cbcf278805981_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
20eee7635a7776124e9cbcf278805981_JaffaCakes118
Size
88KB
MD5
20eee7635a7776124e9cbcf278805981
SHA1
6efa195a27ba07311b241abef5eb10ee4deddcf4
SHA256
3a4fbfc97cf79e7ba4b1559d935ef3f478c9d3c8d14d067070f1d76d7bd35980
SHA512
0ea02125d2f10a115d03231fe7b5d95692c782a5522e524b97dab34e105bae98931c9143574b176ec67b1d096ca5fe059026893559d974279f6c42d903d5ba66
SSDEEP
1536:AS0piZRrTOgmtsgaFIkR5Zbt7bt9CK5h7MrU8EcsW4dWRN4Zr:AS0piXrTfmtdYIkRvxbtgCg2zWRIr
Checks for missing Authenticode signature.
resource |
---|
20eee7635a7776124e9cbcf278805981_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
VirtualAlloc
VirtualFree
VirtualProtect
CloseHandle
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
LoadLibraryW
GetModuleHandleW
CreateFileW
GetLastError
HeapFree
MultiByteToWideChar
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
EncodePointer
DecodePointer
IsProcessorFeaturePresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
HeapAlloc
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetProcAddress
WideCharToMultiByte
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
LCMapStringW
WriteFile
GetModuleFileNameW
LoadLibraryExW
HeapReAlloc
OutputDebugStringW
HeapSize
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
DeinitServerExtension
GetExtensionName
InitServerExtension
ReflectiveLoader
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ