CheckDOM
CheckPOST
IAlloc
WantPOST
Static task
static1
Behavioral task
behavioral1
Sample
0ffcc1ec87124ba40fe492dd732ac76f_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ffcc1ec87124ba40fe492dd732ac76f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0ffcc1ec87124ba40fe492dd732ac76f_JaffaCakes118
Size
376KB
MD5
0ffcc1ec87124ba40fe492dd732ac76f
SHA1
cfdf12bcaaa0aa0af4010242343222af996cb2b1
SHA256
97d85b93f1c227530dca0b04adab3d478d30d97813e8b33272809b55579e4d48
SHA512
8166ad7fe3cd23eb5724b7084c469501c0ad26d4d129d061117de73007511f1b5beaf8c4142d0e4d58c1b69d7b9754a2e742d64acb8e03bf01edf8685c13b618
SSDEEP
6144:lJL4ne2aGD3CkK5eOhuZOG3eAldychq0OY0QTBJLLLtGB3QT:HL4nrG0QGuAlLF0QTrLPtx
Checks for missing Authenticode signature.
resource |
---|
0ffcc1ec87124ba40fe492dd732ac76f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
RaiseException
GetLocaleInfoA
VirtualProtect
GetTickCount
CloseHandle
SetFilePointer
ReadFile
CreateFileA
WriteFile
MultiByteToWideChar
GetFileSize
GetLastError
lstrlenA
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
GetProcAddress
FreeLibrary
Sleep
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
OutputDebugStringA
HeapAlloc
HeapFree
InitializeCriticalSection
HeapCreate
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
DeleteCriticalSection
GetTimeZoneInformation
GetCurrentThreadId
GetACP
TerminateProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetSystemTimeAsFileTime
RtlUnwind
FreeEnvironmentStringsA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeFormatA
GetDateFormatA
HeapSize
HeapReAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCPInfo
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
VirtualFree
VirtualAlloc
LoadStringA
IsWindow
CoInitialize
CoUninitialize
CoCreateInstance
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysFreeString
VariantInit
SysAllocString
VariantClear
CheckDOM
CheckPOST
IAlloc
WantPOST
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ