CrashAddData
CrashCleanup
CrashErrors
CrashInit
CrashSend
CrashSetCallback
DllMain
__Reserved00
__Reserved01
__Reserved05
__Reserved06
Static task
static1
Behavioral task
behavioral1
Sample
19aca5da05ee8e5862e1d1ee50e84cec_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
19aca5da05ee8e5862e1d1ee50e84cec_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
19aca5da05ee8e5862e1d1ee50e84cec_JaffaCakes118
Size
158KB
MD5
19aca5da05ee8e5862e1d1ee50e84cec
SHA1
7b3652f8d51bf74174e1e5364dbbf901a2ebcba1
SHA256
df818c2dccacc532ba0205749329b7e46d1f6616b40da55e0d994105bd988bd2
SHA512
23f24e5d23f1b9f1f3263c563db522a4988e4b85cca4dfd056e049590e9386af04d945d30bf40ec335f4908ea625aeb033302087a2af54adabc980fc29a1e71e
SSDEEP
3072:g2a+jZLHUBGGrW1t/kc37wZYf7cQdnA+8EPOumgBZoT:g9Aj53oYzbA+82da
Checks for missing Authenticode signature.
resource |
---|
19aca5da05ee8e5862e1d1ee50e84cec_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CertFreeCertificateContext
CertCloseStore
CertCreateCertificateContext
CertEnumCertificatesInStore
CertGetIssuerCertificateFromStore
CertOpenStore
CertAddCertificateContextToStore
CertVerifySubjectCertificateContext
GetModuleFileNameA
SetErrorMode
GetQueuedCompletionStatus
WaitForSingleObject
TerminateThread
Sleep
PostQueuedCompletionStatus
CreateIoCompletionPort
CloseHandle
CreateThread
CancelIo
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
GlobalFree
GetComputerNameA
GetModuleHandleA
GetSystemDirectoryW
GetVolumeInformationW
GetTickCount
InterlockedExchange
GetFileSize
WriteFile
ReadFile
GetModuleFileNameW
CreateFileW
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
LCMapStringW
HeapReAlloc
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
DeleteCriticalSection
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
HeapDestroy
HeapCreate
FlushFileBuffers
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
HeapSize
GetModuleHandleW
ExitProcess
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
CoSetProxyBlanket
CoInitialize
CoCreateInstance
CoInitializeSecurity
SysFreeString
VariantClear
VariantInit
SafeArrayGetLBound
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElement
SafeArrayPutElement
SafeArrayGetUBound
SysAllocString
listen
WSAIoctl
closesocket
WSAStartup
WSASocketA
htonl
htons
ntohs
gethostbyname
bind
shutdown
getsockname
setsockopt
WSARecv
WSASend
inet_addr
inet_ntoa
gethostname
ntohl
WSAGetLastError
CrashAddData
CrashCleanup
CrashErrors
CrashInit
CrashSend
CrashSetCallback
DllMain
__Reserved00
__Reserved01
__Reserved05
__Reserved06
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ