DeinitServerExtension
InitServerExtension
ReflectiveLoader
Static task
static1
Behavioral task
behavioral1
Sample
742c9e7a0a14f72abf0d0920b066b287_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
742c9e7a0a14f72abf0d0920b066b287_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
742c9e7a0a14f72abf0d0920b066b287_JaffaCakes118
Size
117KB
MD5
742c9e7a0a14f72abf0d0920b066b287
SHA1
7e0944d7820ddc1292ccc6b22d9d8484204eff36
SHA256
a313c0abdf34340c856e0d3b9688f7353fe2c44a051268fa5c279774606ce7a4
SHA512
78760f792e3b0d4f1ead14af66647b18c4385cafb7fb080dcb6ed4e4ca8dbd93af8952c8f2f56f80bbf91f6af5bf8f8a4ae79b098902b55618601c215e8fbf1e
SSDEEP
1536:Fg9XNpR4q0Oq7NrocEUBO+VBJ0a1sKT+EEz1Tf7TaJM4WHPwy7eeS80G9qsW4dkr:OR/0bhrts+XOaCKT+BzVfvaJM4kTNvk
Checks for missing Authenticode signature.
resource |
---|
742c9e7a0a14f72abf0d0920b066b287_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ExitProcess
SetUnhandledExceptionFilter
ExitThread
RaiseException
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExA
MultiByteToWideChar
WideCharToMultiByte
Sleep
GetSystemTime
SystemTimeToFileTime
ReadFile
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentThreadId
RtlUnwindEx
IsDebuggerPresent
EncodePointer
DecodePointer
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
CloseHandle
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
GetConsoleCP
GetProcessHeap
GetModuleHandleExW
GetModuleFileNameW
SetLastError
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetStdHandle
FlushFileBuffers
WriteConsoleW
CreateFileW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringW
GetStringTypeW
SetEndOfFile
HeapSize
LCMapStringW
DeinitServerExtension
InitServerExtension
ReflectiveLoader
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ