Entry
InstallM
InstallS
Static task
static1
Behavioral task
behavioral1
Sample
7c834d71a108c4da3c0a8b7af05507ad_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7c834d71a108c4da3c0a8b7af05507ad_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
7c834d71a108c4da3c0a8b7af05507ad_JaffaCakes118
Size
116KB
MD5
7c834d71a108c4da3c0a8b7af05507ad
SHA1
4acb781839437349e1644c769291799d7ccab255
SHA256
38ad42174861ea9b4ea929347f4cf37cc80b075cad0e419f12e3b6cfafa21454
SHA512
7d81c7204ff05ffdf09a2f0ad353fcba62f980de6e7c16bddbd9b7eb120fbf01690bd95ab991befddf2e25d71f8fb641972dfbc398c674dc6a70b295d07cb10b
SSDEEP
1536:C16uwb1/D1QQCmtfbuIZ6c4VJhTpmu3EfFxaQiXyOl6t+txUk:C18fbuIcmuwDtYyOl6t+X
Checks for missing Authenticode signature.
resource |
---|
7c834d71a108c4da3c0a8b7af05507ad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
lstrcmpA
SetLastError
GetTempFileNameA
GetTempPathA
SetFileAttributesA
lstrlenA
WriteFile
SetFilePointer
ReadFile
CopyFileA
GetPrivateProfileStringA
FindClose
FindNextFileA
FindFirstFileA
CreateProcessA
OpenEventA
GetVolumeInformationA
GetDriveTypeA
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
Sleep
ExitProcess
WaitForSingleObject
ResumeThread
TerminateProcess
DeleteFileA
GetEnvironmentVariableA
GetModuleHandleA
GetFileTime
GetSystemTime
SetFileTime
GetTempPathW
GetWindowsDirectoryW
GetEnvironmentVariableW
GetComputerNameW
GetTimeZoneInformation
GetLocalTime
MultiByteToWideChar
lstrcatW
lstrlenW
GetVersionExA
GetWindowsDirectoryA
CreateDirectoryA
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
lstrcpyA
CreateFileA
GetFileInformationByHandle
CloseHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetFileAttributesA
LoadLibraryExA
IsBadCodePtr
IsBadReadPtr
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
WideCharToMultiByte
HeapSize
SetUnhandledExceptionFilter
FlushFileBuffers
GetCurrentProcess
GetStartupInfoA
GetStdHandle
HeapAlloc
HeapFree
GetFileType
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
TlsAlloc
TlsFree
SetStdHandle
SetEndOfFile
SetHandleCount
RegisterClassExA
CreateWindowExA
DefWindowProcA
CharLowerBuffA
wsprintfA
wsprintfW
GetMessageA
TranslateMessage
DispatchMessageA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegCloseKey
UuidToStringA
UuidCreate
RpcStringFreeA
inet_ntoa
gethostbyname
WSAStartup
WSACleanup
Entry
InstallM
InstallS
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ