WHInit
WHUninit
Static task
static1
Behavioral task
behavioral1
Sample
100bb8b13ce0b150df42a07106590c4f_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
100bb8b13ce0b150df42a07106590c4f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
100bb8b13ce0b150df42a07106590c4f_JaffaCakes118
Size
176KB
MD5
100bb8b13ce0b150df42a07106590c4f
SHA1
4d3bb90a1b68ccd55a6fab4cb1f47ab76eddb360
SHA256
14775bd9f5abd7fd19ab1adb3e146bd23368831c47464bd4db4ab923b08d136f
SHA512
88717a34adf30ed0da2c8690672f8c0b347f44d3c09463bf274b646d7dd3e45a98643607880c097c936fa411dba6fd5afc0d2b4dc53fedbecfc2d5e6de01e40c
SSDEEP
3072:huWVbEaOL5BGnhoZnSSP/FwevU0Da88t86H:Vg9BqoxSMdDU0VA
Checks for missing Authenticode signature.
resource |
---|
100bb8b13ce0b150df42a07106590c4f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnumProcesses
GetModuleBaseNameA
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
Netbios
GetStringTypeW
GetStringTypeA
WriteConsoleW
MultiByteToWideChar
CreateProcessA
FreeEnvironmentStringsA
lstrcpyA
lstrlenA
GetEnvironmentStrings
lstrcmpA
GetLastError
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WriteFile
ReadFile
CreateFileA
GetFileSize
OpenFile
GetPrivateProfileIntA
GetWindowsDirectoryA
WritePrivateProfileStringA
GetLocalTime
GetPrivateProfileStringA
SetEndOfFile
SetFilePointer
lstrcatA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcess
OpenMutexA
WaitForSingleObject
ReleaseMutex
LocalFree
OpenProcess
Module32Next
Module32First
CreateToolhelp32Snapshot
CreateThread
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
GetEnvironmentVariableA
WideCharToMultiByte
lstrlenW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
Sleep
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
CreateMutexA
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
ExitProcess
HeapCreate
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapAlloc
HeapFree
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
VirtualFree
HeapReAlloc
HeapDestroy
SendMessageTimeoutA
GetSystemMetrics
GetParent
SetPropA
GetPropA
CallWindowProcA
SetWindowLongA
RegisterWindowMessageA
DispatchMessageA
TranslateMessage
SetTimer
KillTimer
GetAncestor
GetClassNameA
wsprintfA
PostThreadMessageA
SetWindowPos
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetMessageA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorA
CoCreateInstance
CoInitialize
SysAllocStringLen
VariantClear
VariantInit
SysFreeString
SysAllocString
VarCmp
WHInit
WHUninit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ