InternalSetIpForwardEntry
RestoreMediaSense
CreateProcessNotify
imapreg
GetUdpTable
UnenableRouter
GetOwnerModuleFromUdp6Entry
SendARP
CreateProxyArpEntry
GetIpErrorString
InternalSetIpNetEntry
CreateIpNetEntry
Static task
static1
Behavioral task
behavioral1
Sample
23b159ed45873bb0373b78787b1df0d4_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23b159ed45873bb0373b78787b1df0d4_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
23b159ed45873bb0373b78787b1df0d4_JaffaCakes118
Size
46KB
MD5
23b159ed45873bb0373b78787b1df0d4
SHA1
37cc18190d71c01a98faeb0be3b6fd313da389c8
SHA256
7af11135664beb8a1b230f67a55f6bfd390dc43c9cbaabf13f18d66c594944cc
SHA512
aa4427e8a38772d5a9b14ae4c5c8a5fd3041fd9c385d13dee461b39df675dd7c345ba5c502c110a28d21c99e039bc3e7d5df2610c1ca8ec828c1a451a30a3820
SSDEEP
768:19rem2vmxFwI7vdm6T3ZbGHIsiUSFtL/FM18cTYcLH2TC+djnggF1sfRaH3X6:h2qwovdma3ZbN5UShM18cMKH/+djngWd
Checks for missing Authenticode signature.
resource |
---|
23b159ed45873bb0373b78787b1df0d4_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CreateRectRgn
GetTextColor
GetBkColor
GetClientRect
GetWindowRect
EnableWindow
GetSystemMetrics
GetForegroundWindow
GetDesktopWindow
PostMessageA
GetDC
GetSystemMenu
RevokeDragDrop
VirtualAlloc
GetUserDefaultLCID
DuplicateHandle
UnhandledExceptionFilter
GetACP
CloseHandle
GetStringTypeW
EnterCriticalSection
GetOEMCP
InterlockedDecrement
GetModuleHandleA
GetModuleHandleA
LoadResource
GetEnvironmentStrings
SHGetMalloc
GetCatalogObject
OpenComponentLibraryOnStreamEx
CLSIDFromStringByBitness
SetupSave
ZwQuerySystemEnvironmentValueEx
ZwQueryPerformanceCounter
ZwQueryOpenSubKeys
NtCreateTimer
ZwQueryKey
ZwClose
NtIsProcessInJob
PropertySheetA
ImageList_EndDrag
InternalSetIpForwardEntry
RestoreMediaSense
CreateProcessNotify
imapreg
GetUdpTable
UnenableRouter
GetOwnerModuleFromUdp6Entry
SendARP
CreateProxyArpEntry
GetIpErrorString
InternalSetIpNetEntry
CreateIpNetEntry
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ