APIExportForDetours
_GetCountColorProfileElements@8
Static task
static1
Behavioral task
behavioral1
Sample
4ecf3caa71a60b06515a33957bd7f000_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4ecf3caa71a60b06515a33957bd7f000_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
4ecf3caa71a60b06515a33957bd7f000_JaffaCakes118
Size
1.4MB
MD5
4ecf3caa71a60b06515a33957bd7f000
SHA1
4383f3eee9e1136298de574b8ee142a0adaaf357
SHA256
1f7aea2c6fb268a4af9c819e323aba7253ca95cef5e40d74255c09e7665baf10
SHA512
7bcb41e2e6547c9a14c00a2a398f70f45c9b3c5c38fe734f0cc346289e9b35f94328afa561f700432b2f30252dd8ed44a18884cb4f3a3e80577c2ae97f4a61e3
SSDEEP
24576:yNSAwgNudfFp0WcD6jlv5HhjpZXXrP3I2gYUO:y0gN+rlBHjZHr42BUO
Checks for missing Authenticode signature.
resource |
---|
4ecf3caa71a60b06515a33957bd7f000_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
ExpandEnvironmentStringsW
GetLastError
LockResource
CreateFileMappingW
GetTempPathW
lstrlenW
MultiByteToWideChar
CreateFileW
GetModuleFileNameW
GetFileAttributesW
SizeofResource
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
WriteFile
FlushViewOfFile
WaitForSingleObject
CreateDirectoryW
CreateProcessW
LoadResource
FindResourceW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
FindResourceExW
UnmapViewOfFile
MapViewOfFile
GetFileSize
ExitProcess
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
DeleteFileW
EncodePointer
DecodePointer
GetFileAttributesExW
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
InterlockedDecrement
GetModuleHandleExW
GetProcAddress
GetStdHandle
Sleep
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetFileType
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
RtlUnwind
CompareStringW
LCMapStringW
GetStringTypeW
SetEnvironmentVariableA
WriteConsoleW
RegCreateKeyW
RegQueryValueExW
RegOpenKeyW
RegDeleteKeyW
RegOpenKeyExW
CryptDecrypt
CryptDestroyKey
CryptEncrypt
CryptAcquireContextW
CryptDeriveKey
CryptDestroyHash
CryptHashData
CryptCreateHash
RegSetValueExW
RegCloseKey
RegEnumKeyExW
CryptReleaseContext
SHCopyKeyW
CryptStringToBinaryA
CryptBinaryToStringA
APIExportForDetours
_GetCountColorProfileElements@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ