AddAtomS
AddAtomT
Entry
Static task
static1
Behavioral task
behavioral1
Sample
5036314c2f8f594cc2d597307c814176_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5036314c2f8f594cc2d597307c814176_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
5036314c2f8f594cc2d597307c814176_JaffaCakes118
Size
176KB
MD5
5036314c2f8f594cc2d597307c814176
SHA1
e73fa7f3bcdfe57e007fdd080eb5bf386642b86f
SHA256
f80b1043f20ad9898a21c8643553e841c61382af57224a476e61d85af6a204ec
SHA512
7201ab0e8f496372fbfdbded97f46090e9aed5adc431086ae7e4cb572c28ff44b8fbffafa23066ba0ff07f3044a59cd7ec670c5e9a86e94899c39dcac3dbfe8c
SSDEEP
3072:fvTwJHM8bgFKHXoczloK3vBrp2/tpIJe34lOdOO3w+:0JHMzFnwloKfyHmOndOh
Checks for missing Authenticode signature.
resource |
---|
5036314c2f8f594cc2d597307c814176_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
FindClose
FindFirstFileA
UnmapViewOfFile
GetLastError
MapViewOfFile
CreateFileMappingA
GetFileSize
lstrcmpA
GetTempFileNameA
GetTempPathA
SetLastError
SetFileAttributesA
CopyFileA
WriteFile
GetPrivateProfileStringA
FindNextFileA
OpenEventA
GetVolumeInformationA
GetDriveTypeA
ExitProcess
GetModuleHandleA
GetModuleFileNameA
SetFilePointer
ReadFile
CreateProcessA
Sleep
lstrcatA
GetSystemDirectoryA
GetSystemTime
SetFileTime
GetTempPathW
GetWindowsDirectoryW
DeleteFileA
GetComputerNameW
GetTimeZoneInformation
GetLocalTime
MultiByteToWideChar
lstrcatW
lstrlenW
GetVersionExA
GetComputerNameA
WaitForSingleObject
ResumeThread
TerminateProcess
GetTickCount
FileTimeToSystemTime
GetWindowsDirectoryA
GetEnvironmentVariableA
CreateDirectoryA
CreateMutexA
ReleaseMutex
OutputDebugStringA
GetFileTime
InterlockedIncrement
InterlockedDecrement
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
lstrcpyA
CreateFileA
GetFileInformationByHandle
CloseHandle
FileTimeToLocalFileTime
lstrlenA
FileTimeToDosDateTime
GetFileAttributesA
GetEnvironmentVariableW
IsBadCodePtr
IsBadReadPtr
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlushFileBuffers
GetStartupInfoA
GetStdHandle
SetHandleCount
SetEndOfFile
SetStdHandle
HeapAlloc
HeapFree
GetFileType
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
GetCurrentProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
TlsAlloc
TlsFree
RegisterClassExA
CreateWindowExA
DefWindowProcA
wsprintfA
SendMessageA
CharLowerBuffA
wsprintfW
GetMessageA
TranslateMessage
DispatchMessageA
RegCreateKeyA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegCloseKey
RpcStringFreeA
UuidToStringA
UuidCreate
WSACleanup
inet_ntoa
gethostbyname
WSAStartup
AddAtomS
AddAtomT
Entry
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ