CreateCNPEIF
DeleteCNPEIF
Static task
static1
Behavioral task
behavioral1
Sample
8ab9b64948222ebbc8bf01582083231c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8ab9b64948222ebbc8bf01582083231c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
8ab9b64948222ebbc8bf01582083231c_JaffaCakes118
Size
266KB
MD5
8ab9b64948222ebbc8bf01582083231c
SHA1
c444d5f8e3c979c44f6a7064ac5ae2d68b5f5f4e
SHA256
14e221aa35e618a134505aee92cb17794309d1daeec110d3dbefbd3c05f61101
SHA512
25cd8d555f793749b1bf53f92e1a8a7a78c990b7ef2be0582bfce3fd062005940a5338bb526c7eaddb77dcdf6a96c5c5f608f2a635bf389e98bc0aa443a34e86
SSDEEP
6144:VM62pdr6BmrVrDBLpLPPJvoWvN85/puIcjENaQ:qD2BmrVnBLRPhs/putjEA
Checks for missing Authenticode signature.
resource |
---|
8ab9b64948222ebbc8bf01582083231c_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PathFindFileNameW
PathAddBackslashW
PathRemoveExtensionW
PathFindExtensionW
PathFileExistsW
PathAppendW
PathRemoveFileSpecW
SHCreateDirectoryExW
SHFileOperationW
ord80
ord73
ord76
ord65
ord70
ord16
ord34
ord82
ord72
ord67
ord35
wsprintfW
CreateStreamOnHGlobal
CoCreateInstance
CreateSemaphoreW
CreateFileW
WriteConsoleW
SetStdHandle
FlushFileBuffers
GetStringTypeW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LCMapStringW
HeapReAlloc
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
FreeLibrary
LoadLibraryW
GetProcAddress
GlobalLock
GlobalAlloc
InitializeCriticalSectionAndSpinCount
GlobalUnlock
GetLastError
MoveFileW
GlobalFree
DeleteFileW
CloseHandle
GetModuleFileNameW
LocalFree
DuplicateHandle
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
HeapFree
HeapAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
RaiseException
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
CreateThread
ExitThread
LoadLibraryExW
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
GetProcessHeap
GetStdHandle
WriteFile
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualFree
CreateCNPEIF
DeleteCNPEIF
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ