LLlSeHut
XkqAoe
cxLLZWRPxRxWd
vVYDRWbEtPx
Overview
overview
10Static
static
387c14b1dff...18.exe
windows7-x64
1087c14b1dff...18.exe
windows10-2004-x64
8$PLUGINSDI...fA.dll
windows7-x64
1$PLUGINSDI...fA.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...Kg.dll
windows7-x64
3$PLUGINSDI...Kg.dll
windows10-2004-x64
3$PLUGINSDI...zN.dll
windows7-x64
1$PLUGINSDI...zN.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
87c14b1dff05af5a75445e0df9f954d5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
87c14b1dff05af5a75445e0df9f954d5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/EgASAwzPsfA.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/EgASAwzPsfA.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/WoyubRcNXKg.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/WoyubRcNXKg.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/oZKbXihlezN.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/oZKbXihlezN.dll
Resource
win10v2004-20240508-en
Target
87c14b1dff05af5a75445e0df9f954d5_JaffaCakes118
Size
9.2MB
MD5
87c14b1dff05af5a75445e0df9f954d5
SHA1
d35ec1e3da2e5e6021e5df64d15fabdd58f862e3
SHA256
af13b39d7a11a35793ba35ec5b2ebf0f4caa45ab1544c57a704ff2b513d95ef8
SHA512
12503e5eecbace11be42312a00f326fcd835182b47d7ad70dd10aca5abcc69bfd544fa0f845c3dde70f7e101de99bb5bdec2b4c95cad9b27595f9578a3f2e2d3
SSDEEP
196608:7SblchTMGopwDnexkLxhAdrb4wXDVSssebKsthllcmjkT:7OchT6eexIusmD4fgKohllcmjA
Checks for missing Authenticode signature.
resource |
---|
87c14b1dff05af5a75445e0df9f954d5_JaffaCakes118 |
unpack001/$PLUGINSDIR/EgASAwzPsfA.dll |
unpack001/$PLUGINSDIR/System.dll |
unpack001/$PLUGINSDIR/WoyubRcNXKg.dll |
unpack001/$PLUGINSDIR/oZKbXihlezN.dll |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DecodePointer
GetProcAddress
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryA
CreateFileW
CloseHandle
WriteConsoleW
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
SetStdHandle
GetStringTypeW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
LCMapStringW
CompareStringW
GetTimeZoneInformation
GetFileType
GetStdHandle
GetACP
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
InterlockedFlushSList
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
MultiByteToWideChar
GlobalFree
lstrcpyW
lstrcpynW
GlobalAlloc
WideCharToMultiByte
wsprintfW
AddMonitorW
DeletePortW
SetPortW
EnumPrintersA
GetPrinterDriverW
StartDocPrinterA
GetPrinterA
SetPrinterA
AddPrintProvidorW
AddFormA
SysAllocStringByteLen
VarCyFromDate
VarUI1FromR8
VarI4FromBool
VarI2FromR4
SafeArrayDestroy
SafeArrayGetElement
VarR8FromDate
VarI4FromCy
VariantTimeToDosDateTime
VarR8FromR4
VarR4FromDec
SysStringByteLen
SysFreeString
SysAllocStringLen
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
VarCyFromI4
VarR8FromStr
VarI2FromBool
SnmpSvcInitUptime
SnmpUtilOidAppend
SnmpTfxClose
SnmpSvcSetLogType
SnmpUtilOidCmp
SnmpUtilOctetsFree
SnmpSvcAddrIsIpx
SnmpTfxQuery
SnmpSvcGetUptime
PdhUpdateLogFileCatalog
PdhSetCounterScaleFactor
PdhEnumMachinesW
PdhBindInputDataSourceA
PdhGetCounterTimeBase
PdhGetDefaultPerfCounterA
PdhSelectDataSourceA
PdhExpandCounterPathA
PdhMakeCounterPathA
PdhGetRawCounterArrayW
PdhCloseLog
PdhVbGetOneCounterPath
PdhParseInstanceNameW
PdhEnumLogSetNamesW
PdhVbAddCounter
InitializeProcessForWsWatch
GetDeviceDriverBaseNameW
QueryWorkingSet
EnumDeviceDrivers
GetPerformanceInfo
GetWsChanges
GetModuleFileNameExW
GetDeviceDriverFileNameA
GetModuleBaseNameW
GetModuleInformation
EmptyWorkingSet
LLlSeHut
XkqAoe
cxLLZWRPxRxWd
vVYDRWbEtPx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary
wsprintfW
CLSIDFromString
StringFromGUID2
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
SetEnvironmentVariableA
CompareStringW
GetStringTypeW
LCMapStringW
HeapReAlloc
LoadLibraryW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
ExitProcess
HeapSize
GetModuleFileNameW
GetStdHandle
WriteFile
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GlobalFree
lstrcpynW
GlobalAlloc
WideCharToMultiByte
RtlUnwind
DecodePointer
EncodePointer
RaiseException
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
CoIsHandlerConnected
OleLockRunning
GetPerformanceInfo
GetModuleFileNameExW
EnumPageFilesA
GetProcessMemoryInfo
GetDeviceDriverFileNameW
InitializeProcessForWsWatch
EnumPageFilesW
GetDeviceDriverFileNameA
EnumDeviceDrivers
GetProcessImageFileNameA
TraceDumpExW
RouterLogEventValistExA
RouterLogEventDataW
TraceVprintfExW
TraceDeregisterExA
LogErrorA
RouterLogEventValistExW
RouterLogEventDataA
LogErrorW
RouterLogDeregisterA
RouterLogRegisterW
TracePutsExA
ord12
OleUIConvertW
ord6
ord7
OleUIEditLinksW
ord9
PeerGraphGetProperties
PeerGraphGetNodeInfo
PeerGraphCloseDirectConnection
PeerGraphOpen
PeerGraphClose
PeerGraphAddRecord
PeerGraphUnregisterEvent
PeerGraphSendData
PeerGraphSetProperties
wsprintfW
VariantInit
VariantClear
VariantCopy
VarCyFromI4
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysFreeString
KFPdbWdp
bdbGEt
gIGiZje
wwCCUThYvx
xdKrjTwkNGpDe
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteConsoleW
CreateFileW
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
SystemTimeToTzSpecificLocalTime
SetStdHandle
SetFilePointerEx
FindResourceExW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetEnvironmentVariableA
GetStringTypeW
LCMapStringW
CompareStringW
OutputDebugStringW
LoadLibraryExW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleFileNameA
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
GetTimeZoneInformation
IsProcessorFeaturePresent
IsDebuggerPresent
VirtualQuery
GetSystemInfo
GetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
GetCommandLineW
FindFirstFileW
GetSystemDefaultUILanguage
GetUserDefaultLCID
GetSystemDefaultLCID
MultiByteToWideChar
GetProcAddress
VirtualAlloc
LoadLibraryA
GetFileType
VirtualProtect
LocalFileTimeToFileTime
GetThreadContext
QueryPerformanceCounter
InitializeCriticalSection
GetPrivateProfileStructW
GetModuleFileNameW
lstrcmpW
GetStartupInfoW
GetProcessVersion
GetAtomNameA
GetModuleHandleA
OpenEventW
FindAtomW
CloseHandle
GlobalFree
lstrcpynW
WideCharToMultiByte
FreeLibrary
LoadLibraryW
OpenFileMappingA
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
RaiseException
GetDC
DefWindowProcA
CallMsgFilterA
DeferWindowPos
AppendMenuA
DispatchMessageW
CreateIconFromResource
CheckMenuRadioItem
CreateMDIWindowW
DispatchMessageA
LineTo
GetWindowExtEx
SetBrushOrgEx
GetRegionData
CombineTransform
GetTextAlign
CreateFontIndirectExA
SetPortW
DeleteMonitorW
FindNextPrinterChangeNotification
ResetPrinterA
ReadPrinter
ScheduleJob
EnumPrinterDataW
SetJobA
FindFirstPrinterChangeNotification
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocString
VariantClear
VariantCopy
VarCmp
MprConfigTransportDelete
MprConfigInterfaceTransportEnum
MprAdminDeregisterConnectionNotification
MprAdminIsServiceRunning
MprAdminBufferFree
MprConfigInterfaceGetHandle
MprAdminDeviceEnum
MprConfigTransportGetInfo
MprAdminInterfaceGetCredentialsEx
MprConfigInterfaceSetInfo
GetThemeRect
GetThemeFilename
DrawThemeBackground
GetThemeColor
EnableTheming
HitTestThemeBackground
GetThemeSysColor
GetThemeDocumentationProperty
PeerGroupSendData
PeerGroupCloseDirectConnection
PeerGroupUniversalTimeToPeerTime
PeerGroupRegisterEvent
PeerHostNameToPeerName
PeerGroupEnumRecords
PeerGetNextItem
RtmDeregisterFromChangeNotification
RtmWriteInstanceConfig
RtmGetExactMatchDestination
MgmDeleteGroupMembershipEntry
SearchInTable
RtmBlockSetRouteEnable
MgmAddGroupMembershipEntry
oYbinYIMHKwDYVNVaf
sPEped
svTeJiaCKsCmLX
wxXOIBIjA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ