ckcr
ckmz
ckop
jrefvwevbe
pkill
sendc
swvervwerbv
Static task
static1
Behavioral task
behavioral1
Sample
1a8e5b3fd097c08d949641aac205b9fb_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1a8e5b3fd097c08d949641aac205b9fb_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1a8e5b3fd097c08d949641aac205b9fb_JaffaCakes118
Size
118KB
MD5
1a8e5b3fd097c08d949641aac205b9fb
SHA1
d0c078108e67365574d19fdc38dab6fe4eac4d45
SHA256
bc6377698ade84095d54725787ca7f01cae7c972b48001bc94996e701b41487e
SHA512
698cd7428d8ff24694e4b463af7c3e691358bbb0b1932db1d6122e74a2e9e2493e5fe12938c0993e8e8d2f10216ba5a00538336ffa9c185186c52c5a692b0cdd
SSDEEP
3072:6F2HUz3nTlQheb6OtrUvTn8DZ1skkaHIJsjBWn6ikY8:1c3nTiUbTQvTzFOFij
Checks for missing Authenticode signature.
resource |
---|
1a8e5b3fd097c08d949641aac205b9fb_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateToolhelp32Snapshot
Sleep
Process32NextW
Process32FirstW
CloseHandle
WinExec
OpenProcess
WideCharToMultiByte
WriteFile
CreateFileW
GetFileAttributesW
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
TerminateProcess
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
MultiByteToWideChar
InitializeCriticalSectionEx
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetFileType
GetStdHandle
LCMapStringW
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
LocalFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
GetProcAddress
RtlUnwind
InterlockedFlushSList
GetModuleFileNameW
LoadLibraryExW
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapSize
HeapReAlloc
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
wsprintfW
RegOpenKeyExA
RegCloseKey
SHGetFolderPathW
CoInitializeEx
CoCreateInstance
VariantInit
SysFreeString
VariantClear
SysAllocString
PathIsDirectoryEmptyW
IrtClientAbort
IrtInitDiffBuffer
IrtTearDownDiffBuffer
IrtPogoInit
IrtSetStaticInfo
IrtAutoSweepW
IrtAutoSweepA
ckcr
ckmz
ckop
jrefvwevbe
pkill
sendc
swvervwerbv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ