CheckDOM
CheckPOST
IAlloc
WantPOST
Static task
static1
Behavioral task
behavioral1
Sample
17ced07a0974699806bd97291c7f288a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
17ced07a0974699806bd97291c7f288a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
17ced07a0974699806bd97291c7f288a_JaffaCakes118
Size
352KB
MD5
17ced07a0974699806bd97291c7f288a
SHA1
2278c41736fd60e7f3a12d2a55b5e2ae66f34502
SHA256
be26464a09ae91212c07c60bb3ef382fcc2317d8e007f15cc4643976a72759ee
SHA512
d1f694b4149a4f4d08aaa4e15369a4a73add5ba7e9d18a5ea690e7bbef57e2b82f232685935b79b4a9f7abce3879e002a5ba5ba08f2c7ab0ec365ddc269d1829
SSDEEP
6144:cjkdeoiH88xCnuE7LY4X0iWz7QTBJS5/WD:cjF7Iu0Yo0iWPQTr9
Checks for missing Authenticode signature.
resource |
---|
17ced07a0974699806bd97291c7f288a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
RaiseException
GetLocaleInfoA
VirtualProtect
CloseHandle
SetFilePointer
ReadFile
Sleep
CreateFileA
WriteFile
MultiByteToWideChar
GetTickCount
GetFileSize
GetLastError
OutputDebugStringA
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
InterlockedDecrement
WideCharToMultiByte
lstrlenA
InterlockedIncrement
GetProcAddress
FreeLibrary
LoadLibraryA
LockResource
LoadResource
SizeofResource
FindResourceA
HeapAlloc
HeapFree
InitializeCriticalSection
HeapCreate
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
DeleteCriticalSection
GetTimeZoneInformation
GetACP
TerminateProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RtlUnwind
GetSystemTimeAsFileTime
VirtualAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeFormatA
GetDateFormatA
HeapSize
HeapReAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCPInfo
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
VirtualFree
LoadStringA
IsWindow
CoInitialize
CoUninitialize
CoCreateInstance
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
VariantInit
SysAllocString
SysFreeString
CheckDOM
CheckPOST
IAlloc
WantPOST
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ