DeinitServerExtension
GetExtensionName
InitServerExtension
ReflectiveLoader
StagelessInit
Static task
static1
Behavioral task
behavioral1
Sample
4357453ee1175b780ab6f40426d44da2_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4357453ee1175b780ab6f40426d44da2_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
4357453ee1175b780ab6f40426d44da2_JaffaCakes118
Size
174KB
MD5
4357453ee1175b780ab6f40426d44da2
SHA1
e0b0b018daf050fea4b0c61508f1282f07ce1254
SHA256
415933b1e4d900e9ff15554eb678dad1932f860fe0eb88aa7ac794d55332c265
SHA512
a5c249fd3a9fe00409dc3fb4c94f391e709e6257392bbceb1061f1ec78d69e926ed80a28cc16f8d1ef9d0b942b7bf3d6dbeb0bc575ce6518ce26d67b5bb7851a
SSDEEP
3072:zT0my43TU6l/D7u2svi9+bpA1+kRZ/KaPVO21j:z53T79fu2s6//7
Checks for missing Authenticode signature.
resource |
---|
4357453ee1175b780ab6f40426d44da2_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ntohl
QueryPerformanceCounter
LocalFree
LocalAlloc
GetProcAddress
GetLastError
SetEvent
ResetEvent
CloseHandle
CreateEventA
LoadLibraryA
lstrlenA
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LCMapStringW
EncodePointer
DecodePointer
MultiByteToWideChar
HeapFree
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
HeapAlloc
RtlPcToFileHeader
RaiseException
ExitProcess
GetModuleHandleExW
WideCharToMultiByte
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
HeapReAlloc
GetStringTypeW
VariantClear
VariantInit
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayUnlock
SafeArrayLock
SafeArrayDestroy
SafeArrayCreate
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocString
DeinitServerExtension
GetExtensionName
InitServerExtension
ReflectiveLoader
StagelessInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ