Wgrp95AddInternetShortcut
Wgrp95AddItemEx
Wgrp95CreateGroupEx
Wgrp95DefGroupType
Wgrp95DeleteGroup
Wgrp95DeleteItem
Wgrp95GetFolderNameList
Wgrp95GetGroupItemNames
Wgrp95GetGroupNames
Wgrp95QueryItem
Wgrp95ReplaceItem
Wgrp95Setup
Wgrp95Show
Static task
static1
Behavioral task
behavioral1
Sample
080ba6f16d776fa2a96bedd420261e60_JaffaCakes118.dll
Resource
win7-20240611-en
Target
080ba6f16d776fa2a96bedd420261e60_JaffaCakes118
Size
159KB
MD5
080ba6f16d776fa2a96bedd420261e60
SHA1
70952e0501d0fda783003d5930ba45fa05bdbe17
SHA256
bd84d495a74f55a071233e5c6e66b092abf5d77d4799959a6a7fe41e1199bb91
SHA512
9e02eb02c2cd677a59bbe016ce08d4760883840c05e49c3e9693c828c3aaa24aae41d8bedb10128ec693f1d081f78bced9cdfd690109fe44bee32813582286d5
SSDEEP
3072:pUAdNP3JCx8gXqeq+i3x2PHTyPmTTkTBClty:pUAL5Cxrq+isHTGmTT6Clty
Checks for missing Authenticode signature.
resource |
---|
080ba6f16d776fa2a96bedd420261e60_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapFree
GlobalAlloc
MultiByteToWideChar
DeleteFileA
WinExec
lstrcatA
lstrcpyA
lstrcmpiA
FindClose
FindFirstFileA
SetErrorMode
lstrlenA
IsDBCSLeadByte
lstrcmpA
FindNextFileA
WritePrivateProfileStringA
GetLastError
SetStdHandle
WriteFile
RtlUnwind
CloseHandle
FlushFileBuffers
LoadLibraryA
GetProcAddress
GetStringTypeA
GetStringTypeW
GlobalLock
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
ReadFile
VirtualFree
VirtualAlloc
SetFilePointer
GetModuleFileNameA
ShowWindow
CharUpperA
VkKeyScanA
IsWindow
CharNextA
FindWindowA
SendMessageA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
CoInitialize
CoCreateInstance
CoUninitialize
Wgrp95AddInternetShortcut
Wgrp95AddItemEx
Wgrp95CreateGroupEx
Wgrp95DefGroupType
Wgrp95DeleteGroup
Wgrp95DeleteItem
Wgrp95GetFolderNameList
Wgrp95GetGroupItemNames
Wgrp95GetGroupNames
Wgrp95QueryItem
Wgrp95ReplaceItem
Wgrp95Setup
Wgrp95Show
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE