DllInit
DllInstall
Static task
static1
Behavioral task
behavioral1
Sample
101b111fbb950784edf032099aaeeaf6_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
101b111fbb950784edf032099aaeeaf6_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
101b111fbb950784edf032099aaeeaf6_JaffaCakes118
Size
64KB
MD5
101b111fbb950784edf032099aaeeaf6
SHA1
cc69f0b2173dff618ca81b93963e6a93e0f23cd5
SHA256
dacf33af4a9b7b570e05ee6813926598f83583a11d6715ba1b33801dbb3df783
SHA512
bf5d7f9f76cd22224f4a1bf9a17425fd2accba1b3ca354d13afaad22f2c69fa6d94f970dc8a985475f9a833b5b988e4122f3caae31f67bc0379f333164f02d35
SSDEEP
1536:xX7bqF+FD8nNwhQZ4AsRk2wP9kQ85wzeiAuqZQapv:xXHSYQNvZ4Asq2wP9kQt/nqZQ
Checks for missing Authenticode signature.
resource |
---|
101b111fbb950784edf032099aaeeaf6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalReAlloc
GetFileAttributesExW
ReadProcessMemory
FlushConsoleInputBuffer
GetTimeZoneInformation
SetLocalTime
LocalAlloc
IsBadHugeWritePtr
WriteProfileStringA
GetProcessAffinityMask
LockFileEx
GetExitCodeThread
CreateFileW
LoadResource
CreateWaitableTimerA
GetSystemTime
HeapSetInformation
SwitchToThread
CancelIo
FindNextVolumeMountPointW
FindVolumeMountPointClose
DeleteTimerQueueTimer
DeleteCriticalSection
OpenFile
FindFirstChangeNotificationA
VerifyVersionInfoW
GetComputerNameExW
GetFullPathNameW
CreateMailslotA
CompareFileTime
RemoveDirectoryW
CreateMailslotW
GetTimeFormatA
OpenEventA
GetEnvironmentVariableW
GlobalAddAtomW
GlobalFindAtomA
CreateFileA
GetStringTypeA
SetEvent
TerminateProcess
UnregisterWaitEx
OpenProcess
CreateIoCompletionPort
GetBinaryTypeW
GetHandleInformation
WaitForSingleObjectEx
GetShortPathNameA
CreateToolhelp32Snapshot
CreateProcessA
CopyFileA
WaitForSingleObject
HeapFree
CreateFileMappingA
CreateDirectoryA
MapViewOfFile
lstrcatW
CreateThread
GetComputerNameA
ReleaseMutex
UnmapViewOfFile
GetProcAddress
EnterCriticalSection
HeapAlloc
GetSystemTimeAsFileTime
GetModuleHandleA
VirtualQuery
CreateMutexA
LoadLibraryA
VirtualProtect
lstrcpyW
GetProcessHeap
MoveFileExA
GlobalAddAtomA
GetModuleFileNameA
CoFileTimeNow
CoGetCallContext
OleDuplicateData
OleRun
StgCreateDocfile
CoSwitchCallContext
OleCreateLink
StgIsStorageFile
CreateItemMoniker
RegisterDragDrop
CoFreeUnusedLibrariesEx
GetTextExtentExPointA
GetROP2
GetDIBits
GetKerningPairsA
CreateEnhMetaFileA
GetMetaFileBitsEx
ExtCreatePen
GetSystemPaletteEntries
GetRandomRgn
GetTextMetricsA
GetEnhMetaFileA
Chord
SetStretchBltMode
GetViewportExtEx
SetBkMode
AnimatePalette
EnumFontFamiliesW
ModifyWorldTransform
CreateBrushIndirect
SetDIBits
FillRgn
LPtoDP
GetViewportOrgEx
SetWindowExtEx
EnumMetaFile
GetPixelFormat
TranslateCharsetInfo
DllInit
DllInstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ