getActiveDesktop
getSpecials
getSplit
getWnd
Static task
static1
Behavioral task
behavioral1
Sample
158a53504d3a952b817ff011e2bf01c0_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
158a53504d3a952b817ff011e2bf01c0_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
158a53504d3a952b817ff011e2bf01c0_JaffaCakes118
Size
120KB
MD5
158a53504d3a952b817ff011e2bf01c0
SHA1
aa6da8ed81c8c015c7bdce4fee2ea3d955d4d579
SHA256
ac614783c7d42464f709dbf1c0f3794d2e6249bebeb60e5401a254dfaa954c6f
SHA512
0d98bbbf7538991a4c6527778d6e1f1162a120690ae9b99a25ee3ad2e396f21f15b795721f565b00bc0fcbe8ed0bc222ce5a6b61427f8c4e4b38156001e5486e
SSDEEP
1536:zWzBVDQyLgFOa3wjXloVTcFm3jDY52RKrSZt:zWz63weVT933Y52RK
Checks for missing Authenticode signature.
resource |
---|
158a53504d3a952b817ff011e2bf01c0_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
LoadLibraryA
GetProcAddress
VirtualFree
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleW
VirtualProtect
lstrcmpiA
GetModuleHandleA
VirtualAlloc
lstrcmpA
IsBadReadPtr
CreateThread
WideCharToMultiByte
lstrcmpiW
GetCurrentProcessId
MultiByteToWideChar
VirtualAllocEx
VirtualFreeEx
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetCurrentThreadId
GetCommandLineA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
CreateFileA
CallNextHookEx
NtClose
NtOpenProcess
RtlFreeAnsiString
strstr
RtlUnicodeStringToAnsiString
NtQueryInformationThread
getActiveDesktop
getSpecials
getSplit
getWnd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE