ExecuteDllInterface
GetCurrUsedIPUL
GetCurrUsedIPUL2
GetMACAddress
GetMACAddress2
getGatewayIP
startupW
Static task
static1
Behavioral task
behavioral1
Sample
b6d369fc508c138d4f3730ae0734756a_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b6d369fc508c138d4f3730ae0734756a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
b6d369fc508c138d4f3730ae0734756a_JaffaCakes118
Size
320KB
MD5
b6d369fc508c138d4f3730ae0734756a
SHA1
f4b49f62ae3684d1e36fd2c68999c7fb8f2007ac
SHA256
db5c7cf7ae139b037ce138c4da22535da3c519a1f25b2b9eafd7cc7fe4e53ec3
SHA512
51866aa2f9c534fba4b93c55b8ed29d4947f7e545466d295eeb0743dee16ab1eac0d52aa452a79469619cb838960cfa7db8fa5d77e56e30318a1b4d4cb9596a3
SSDEEP
6144:evNjDiBdr68MgQz3bEy+lkt9a0B8xSC22RmObWTBbFW76:ilDUjY3bEjmt00BKSChRmObWTxI6
Checks for missing Authenticode signature.
resource |
---|
b6d369fc508c138d4f3730ae0734756a_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegCloseKey
RegOpenKeyExW
GetSidIdentifierAuthority
GetSidSubAuthority
GetUserNameW
GetSidSubAuthorityCount
RegQueryValueExW
LookupAccountNameW
IsValidSid
RegCreateKeyExW
RegSetValueExW
UrlMkGetSessionOption
LoadResource
FindResourceW
FindResourceExW
OutputDebugStringW
DisableThreadLibraryCalls
MultiByteToWideChar
DeleteFileW
MoveFileExW
WideCharToMultiByte
Sleep
GetVersionExW
FindFirstFileW
FindNextFileW
LoadLibraryW
GetProcAddress
FreeLibrary
GetPrivateProfileStringW
WritePrivateProfileStringW
LockResource
GetModuleHandleW
CopyFileW
GetModuleFileNameW
GetSystemInfo
WriteFile
GetNativeSystemInfo
GetCurrentProcess
lstrlenW
SetLastError
FindClose
RemoveDirectoryW
CloseHandle
SetFileAttributesW
GetModuleFileNameA
InterlockedDecrement
GetFileSize
GetFileAttributesW
CreateFileW
WaitForSingleObject
FlushFileBuffers
GetCurrentThreadId
ReleaseMutex
GetCurrentProcessId
TerminateProcess
CreateFileA
GetStartupInfoW
ReadFile
MoveFileW
GetTickCount
LocalFree
SetFilePointer
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SizeofResource
GetLastError
RaiseException
SetEnvironmentVariableA
CompareStringW
SetEndOfFile
WriteConsoleW
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetConsoleMode
GetConsoleCP
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFileType
SetHandleCount
HeapCreate
GetLocaleInfoW
GetStdHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
HeapDestroy
HeapReAlloc
HeapSize
InterlockedIncrement
IsValidCodePage
GetOEMCP
GetACP
IsProcessorFeaturePresent
ExitProcess
GetCPInfo
LCMapStringW
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTimeZoneInformation
GetCommandLineA
GetDateFormatW
GetTimeFormatW
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
GetStringTypeW
InterlockedExchange
IsWindow
SendMessageW
wsprintfW
SHGetSpecialFolderPathW
ord165
ShellExecuteW
CoCreateGuid
VariantClear
PathFindExtensionW
PathRemoveFileSpecW
PathFileExistsW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
gethostname
htons
gethostbyname
htonl
InternetOpenA
InternetGetConnectedState
HttpQueryInfoW
InternetSetOptionA
InternetReadFile
InternetCloseHandle
InternetOpenUrlW
GetIfTable
GetIpAddrTable
GetBestInterface
GetBestRoute
ExecuteDllInterface
GetCurrUsedIPUL
GetCurrUsedIPUL2
GetMACAddress
GetMACAddress2
getGatewayIP
startupW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ