GetA
GetContainingRect
GetX
NvSA
NvSX
NvSZ
NvSmartMaxNotifyAppHWND
NvSmartMaxUseDynamicDeviceGrids
Static task
static1
Behavioral task
behavioral1
Sample
485b0887232ba48641a141d5c7be674c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
485b0887232ba48641a141d5c7be674c_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
485b0887232ba48641a141d5c7be674c_JaffaCakes118
Size
44KB
MD5
485b0887232ba48641a141d5c7be674c
SHA1
09333d4e979d201c65a4955f8c91ca64cad0efff
SHA256
5589a879dfcfe72338cbac1e338aee6188d50b414f832a8ccd34f3cda813ad17
SHA512
6654e1ab59805ee65b62cd5a7fa13f3387794c3044927ec8282cb94a8cc69aa0b98d21b3a8b25fb79441b6f37e59db981b8e5528b0da60cce24e0d0d1bceac97
SSDEEP
384:hrfkjqT1qbNfYIiVgSbX/9l7/OI7XcXV3jyi+1wkIluyPzC+cAG8oyU6FC:aOT1qbWbx/9lCI7ejU1BIllZG8oiw
Checks for missing Authenticode signature.
resource |
---|
485b0887232ba48641a141d5c7be674c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLocalTime
Sleep
VirtualProtect
CloseHandle
ReadFile
CreateFileW
VirtualAlloc
lstrcpyW
GetModuleFileNameW
GetModuleHandleA
GetSystemTime
DisableThreadLibraryCalls
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
GetA
GetContainingRect
GetX
NvSA
NvSX
NvSZ
NvSmartMaxNotifyAppHWND
NvSmartMaxUseDynamicDeviceGrids
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ