Extract
FinalFreeLibrary
Static task
static1
Behavioral task
behavioral1
Sample
507ec5de96fc88762596a57d1b18d71b_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
507ec5de96fc88762596a57d1b18d71b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
507ec5de96fc88762596a57d1b18d71b_JaffaCakes118
Size
175KB
MD5
507ec5de96fc88762596a57d1b18d71b
SHA1
83fdcaf4ce83a01b7f7b9d513c2469b2d3828bce
SHA256
31519ec0d734663bd1460fd1e6f8806d370a0a8413fb97a8928ec62a3c43c265
SHA512
20cdadc9adcf1ba8898ce6e62c07a2be5667d4fa4e585d85812fbf54cca58d221d5b11a4520c0b31a6b9cbd24e2136108291e5ca54b5ea4135527419ae8e6607
SSDEEP
3072:lFsMsLRx2qiC1eyNUVRl2Sn1Lp3AM/D4NtDqIKfuf8S5B2P:DsLn2fC1eIw2c3Ai4NtdEho
Checks for missing Authenticode signature.
resource |
---|
507ec5de96fc88762596a57d1b18d71b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentProcess
InitializeCriticalSection
ReleaseMutex
WaitForSingleObject
InterlockedExchange
CreateMutexA
GetDriveTypeA
GetVolumeInformationA
LeaveCriticalSection
EnterCriticalSection
lstrlenA
FindFirstFileA
FindNextFileA
FindClose
GetVersion
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
CreateFileA
FileTimeToLocalFileTime
SetEndOfFile
SetFilePointer
SetFileTime
GetFullPathNameA
GetLocaleInfoA
DosDateTimeToFileTime
SetFileAttributesA
GetFileAttributesA
GetFileTime
SetVolumeLabelA
lstrcpyA
GlobalLock
GlobalUnlock
CreateDirectoryA
DeleteFileA
SetEnvironmentVariableA
CompareStringW
GetProcessHeap
HeapAlloc
HeapFree
CloseHandle
lstrcmpiA
lstrcmpA
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
GetLastError
GlobalFree
GlobalAlloc
FileTimeToSystemTime
lstrcpynA
HeapReAlloc
InterlockedDecrement
GetSystemTimeAsFileTime
RtlUnwind
SetStdHandle
GetFileType
InterlockedIncrement
GetCurrentThreadId
GetCommandLineA
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
VirtualAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStartupInfoA
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryA
InitializeCriticalSectionAndSpinCount
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LoadLibraryA
GetLocaleInfoW
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CompareStringA
SetEnvironmentVariableW
OemToCharA
CharToOemA
CharUpperA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetKernelObjectSecurity
SetKernelObjectSecurity
IsValidSecurityDescriptor
GetSecurityDescriptorDacl
IsValidAcl
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
IsValidSid
GetSecurityDescriptorGroup
GetSecurityDescriptorControl
Extract
FinalFreeLibrary
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ