Entry
InstallM
Static task
static1
Behavioral task
behavioral1
Sample
44fb1516e3c290237b4bed7d59496442_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
44fb1516e3c290237b4bed7d59496442_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
44fb1516e3c290237b4bed7d59496442_JaffaCakes118
Size
104KB
MD5
44fb1516e3c290237b4bed7d59496442
SHA1
e87d58004e122e2a7cf02dcb3452a3c41ae2ef62
SHA256
98f8bbafc11a754c7cf50996fed75f39cdcae0fb624c12d7ab648befc5de7a1f
SHA512
56ab1735582e0e2cdcc89c240b087bc4f5d06569cc95faa685b10631bc134e9b5066fd14476d49bf11f7e927a26194e6c1454faf9f4f23497525870151c4708e
SSDEEP
1536:3hC2aAyrXlWVJGbsrFVTTYMkZAEetdGbGbt1uoIg1zIzO1:zNJRkMSTeDM4t1uoIg1zIzO1
Checks for missing Authenticode signature.
resource |
---|
44fb1516e3c290237b4bed7d59496442_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
UnmapViewOfFile
GetLastError
MapViewOfFile
CreateFileMappingA
GetFileSize
GetTempPathA
WaitForSingleObject
ResumeThread
TerminateProcess
LoadLibraryExA
CreateProcessA
lstrcatA
GetEnvironmentVariableA
lstrlenA
lstrcmpA
SetLastError
GetTempFileNameA
SetFileAttributesA
WriteFile
SetFilePointer
ReadFile
CopyFileA
GetVolumeInformationA
GetDriveTypeA
DeleteFileA
GetModuleHandleA
GetModuleFileNameA
GetSystemDirectoryA
GetFileTime
OpenEventA
Sleep
MoveFileExA
MoveFileA
SetFileTime
lstrcmpiA
GetWindowsDirectoryA
GetTimeZoneInformation
GetLocalTime
GetComputerNameA
GetVersionExA
CreateDirectoryA
OutputDebugStringA
SetEnvironmentVariableA
CompareStringW
CompareStringA
LCMapStringW
lstrcpyA
CreateFileA
GetFileInformationByHandle
CloseHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitProcess
GetFileAttributesA
LCMapStringA
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
IsBadCodePtr
IsBadReadPtr
HeapAlloc
HeapFree
GetFileType
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetSystemTime
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
TlsAlloc
TlsFree
SetStdHandle
SetEndOfFile
SetHandleCount
GetStdHandle
GetStartupInfoA
GetCurrentProcess
FlushFileBuffers
SetUnhandledExceptionFilter
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
RegisterClassExA
CreateWindowExA
DefWindowProcA
wsprintfA
CharLowerBuffA
GetMessageA
TranslateMessage
DispatchMessageA
FindWindowA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegCloseKey
GetUserNameA
UuidToStringA
UuidCreate
RpcStringFreeA
inet_ntoa
gethostbyname
WSAStartup
WSACleanup
Entry
InstallM
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ