InstallRoutineW
StartRoutine
Static task
static1
Behavioral task
behavioral1
Sample
88f24b129e200c4f48852dcbb6e21daf_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
88f24b129e200c4f48852dcbb6e21daf_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
88f24b129e200c4f48852dcbb6e21daf_JaffaCakes118
Size
136KB
MD5
88f24b129e200c4f48852dcbb6e21daf
SHA1
ec451f32110de398781e3edf27354e0425a51a23
SHA256
443cd03b37fca8a5df1bbaa6320649b441ca50d1c1fcc4f5a7b94b95040c73d1
SHA512
f6263d1f811a0efcce32cd85e8ffdb4430fec600dd4683ae86c35703959af11106fa1a45678103e8ceb7902e63d31572bce4abb0c34c8b00b33fa0424ed2daef
SSDEEP
3072:xogBfT8pEhVqSWp6dATv1WmEy19KNmhaLWDj1yzY41pSWnN3WQa5IieQ9:/CyoSWGATv11h8k1yzY4JnFxz1m
Checks for missing Authenticode signature.
resource |
---|
88f24b129e200c4f48852dcbb6e21daf_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetOpenW
InternetCloseHandle
HttpEndRequestW
HttpOpenRequestW
HttpAddRequestHeadersW
InternetSetOptionW
HttpSendRequestW
InternetSetOptionA
InternetConnectW
InternetReadFile
InternetQueryDataAvailable
InternetQueryOptionW
HttpQueryInfoA
InternetSetCookieW
CryptBinaryToStringA
CryptStringToBinaryA
CryptBinaryToStringW
CreateFileA
WriteConsoleW
FlushFileBuffers
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetConsoleOutputCP
GetTickCount
InterlockedDecrement
GetModuleFileNameW
SetCurrentDirectoryW
GetEnvironmentVariableW
GetFileSize
lstrlenA
SetFilePointer
WriteFile
GetFileAttributesA
GetFileAttributesW
ReadFile
CreateFileW
GetLastError
SetLastError
FindNextFileW
CloseHandle
DeleteFileW
DeleteFileA
FreeLibrary
Sleep
GetProcAddress
LoadLibraryA
CreateProcessW
SetHandleInformation
MultiByteToWideChar
CreatePipe
GetStringTypeW
GetStringTypeA
GetProcessHeap
FindFirstFileW
GetCommandLineA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetCurrentThreadId
GetModuleHandleA
GetStdHandle
GetModuleFileNameA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
RaiseException
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
HeapSize
OemToCharA
RegCloseKey
RegCreateKeyExW
RegSetValueExW
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
CoCreateInstance
SysFreeString
VariantClear
SysAllocString
InstallRoutineW
StartRoutine
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ