OnFireFoxUserData
Start
Stop
TmStart
TmStop
Static task
static1
Behavioral task
behavioral1
Sample
1b2734e9e03225d6e7b112703bedbf78_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b2734e9e03225d6e7b112703bedbf78_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1b2734e9e03225d6e7b112703bedbf78_JaffaCakes118
Size
351KB
MD5
1b2734e9e03225d6e7b112703bedbf78
SHA1
12a3e83582d42ac28cdd0f5151906c09f809fb99
SHA256
99267dbf893a674a3b0b00e8323623d29578742ba9a84b70bd85b72988862415
SHA512
5b6244c6e413b425360ecd1dd2b4220e0970d3899943b8b5f932ee8762dda5280757db79d8d5343e62ce903f66c79b898342645865f05e24bb3b6ec0e0a93670
SSDEEP
6144:ioYgAz8+AG/BWjXlY0rohE97zebKzhBMO/MM4YLzjS8y4g:cARG/BWj11royNRzTMO/MkG8W
Checks for missing Authenticode signature.
resource |
---|
1b2734e9e03225d6e7b112703bedbf78_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Netbios
InternetSetOptionA
HttpAddRequestHeadersA
HttpQueryInfoA
InternetReadFileExA
InternetCrackUrlA
InternetOpenA
InternetConnectA
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetSetStatusCallback
ImageDirectoryEntryToData
UuidCreate
RpcStringFreeA
UuidToStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
lstrcpyA
lstrcmpiA
lstrlenA
WaitForSingleObject
WriteProcessMemory
GetCurrentProcess
GetProcAddress
GetModuleHandleA
LocalFree
MoveFileA
ReadFile
GetFileSize
DeleteFileA
CloseHandle
WriteFile
SetFilePointer
CreateFileA
GetFileAttributesA
lstrcatA
GetTempFileNameA
GetWindowsDirectoryA
GetLocalTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventA
SetEvent
SetEndOfFile
GetLastError
FreeLibrary
GetStringTypeA
Sleep
TerminateThread
GetSystemTime
CreateThread
CreateMutexA
ReleaseMutex
GetTickCount
GetModuleFileNameA
GetSystemDirectoryA
GetTempPathA
GetPrivateProfileStringA
WritePrivateProfileStringA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateDirectoryA
lstrcpynA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetLocaleInfoA
HeapReAlloc
VirtualAlloc
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
LoadLibraryA
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetStdHandle
HeapSize
GetConsoleCP
OpenDesktopA
SetThreadDesktop
CloseDesktop
GetMessageA
TranslateMessage
DispatchMessageA
SetTimer
PostThreadMessageA
wsprintfA
KillTimer
GetSecurityDescriptorSacl
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegOpenKeyExA
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
ShellExecuteExA
CoUninitialize
CoInitialize
OnFireFoxUserData
Start
Stop
TmStart
TmStop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ