DefineFileType
insert_to_table
Static task
static1
Behavioral task
behavioral1
Sample
211c1829032410b91ceba2e8ca382d4e_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
211c1829032410b91ceba2e8ca382d4e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
211c1829032410b91ceba2e8ca382d4e_JaffaCakes118
Size
100KB
MD5
211c1829032410b91ceba2e8ca382d4e
SHA1
7becf67e1b71ffebdd21804debd317662479fc34
SHA256
f1d2b095d6cfb2e7fc78d001e1f38440aff9f3500b257d7c32e962d9363258e3
SHA512
033f0781a9532197ec7b14d14fa32ca013d1bd50467fe8e64efe19cca24ed2d63ea70f4470e185410a848418b01decd684086e3c87f20913a9d841a53c075f40
SSDEEP
1536:6SGf4Mwk3ADN2szR/lXFJrki3kBKzUjdT65Cqk3CQ0DBOd:6SGf4Mwk3ADbF/ZFFkwdzs9qFDBU
Checks for missing Authenticode signature.
resource |
---|
211c1829032410b91ceba2e8ca382d4e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException
CloseHandle
ReadFile
CreateFileW
CompareStringW
CompareStringA
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InterlockedExchange
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapSize
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
GetLocaleInfoW
SetEnvironmentVariableA
StgOpenStorage
DefineFileType
insert_to_table
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ