GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueIndexA
VerQueryValueIndexW
VerQueryValueW
Static task
static1
Behavioral task
behavioral1
Sample
09a25572b9e6bcdb8bf37342e59a4d86_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
09a25572b9e6bcdb8bf37342e59a4d86_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
09a25572b9e6bcdb8bf37342e59a4d86_JaffaCakes118
Size
81KB
MD5
09a25572b9e6bcdb8bf37342e59a4d86
SHA1
7d9bbbe3e57561c6ca2cf7acdb77ed1d8fa8d6a1
SHA256
288728dd512a849baaf996dfcba81631efadb163a650999434c977d6134ba2f2
SHA512
5bbc55fb7c3d7a55441d8469b13558bc19ccb1dc076e4884757dd79db69f454e3123f58bc8bec1189df87be3a1aba955b9acad5018c733c6a27d5fa05afe1567
SSDEEP
1536:5IXZcvLCNNSZhT2hOdkuE/8PYc9xvTKN:545/8PYc9xvTKN
Checks for missing Authenticode signature.
resource |
---|
09a25572b9e6bcdb8bf37342e59a4d86_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TerminateProcess
CloseHandle
CreateEventA
OpenEventA
Sleep
DeleteFileA
ReadFile
GetFileSize
CreateFileA
OutputDebugStringA
TerminateThread
CreateToolhelp32Snapshot
GetCurrentProcessId
SetThreadPriority
GetTickCount
GetCommandLineA
GetWindowsDirectoryA
Process32Next
CreateThread
GetVolumeInformationA
GetComputerNameA
GetVersionExA
OpenProcess
GetCurrentThreadId
ExitProcess
DisableThreadLibraryCalls
VirtualAlloc
VirtualFree
MultiByteToWideChar
WriteProcessMemory
VirtualProtectEx
ReadProcessMemory
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
VirtualAllocEx
SetErrorMode
GetModuleHandleA
GlobalAlloc
GlobalLock
LoadLibraryA
GetProcAddress
GlobalUnlock
GlobalFree
GetModuleFileNameA
GetCurrentProcess
IsBadReadPtr
Process32First
WideCharToMultiByte
GetMessageA
GetWindowTextA
GetInputState
CallNextHookEx
SetWindowsHookExA
GetWindowThreadProcessId
EnumWindows
PostMessageA
PostThreadMessageA
GetSystemMetrics
wsprintfA
ClipCursor
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetOpenW
InternetOpenUrlW
InternetReadFile
inet_ntoa
getpeername
RegFlushKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
Netbios
GetAdaptersInfo
__CxxFrameHandler
_strdup
strncat
??2@YAPAXI@Z
strstr
atoi
strchr
sprintf
strrchr
??3@YAXPAX@Z
wcscmp
wcslen
abort
free
_initterm
malloc
_adjust_fdiv
_stricmp
_strupr
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueIndexA
VerQueryValueIndexW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ