DebugBreakpoint
DebugInit
Init
InitService
SpawnedInit
Uninstall
Static task
static1
Behavioral task
behavioral1
Sample
22c82aa200b914978730ae4e49aed283_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
22c82aa200b914978730ae4e49aed283_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
22c82aa200b914978730ae4e49aed283_JaffaCakes118
Size
120KB
MD5
22c82aa200b914978730ae4e49aed283
SHA1
6c7b7f01b3f4f611cd71d7214ae74a3f22a30083
SHA256
4dcbf61f40a2b2a65b3a14f731f968f4788b8fb09fedd5a6e02982fff85bff16
SHA512
5ca9b611ed9c540567c75e85889f1629acf5359fed29e034c9a5096dfccf2d0513b2b8265b9d06127bce399e16ed27f73d00e58a46b1a74a76c6b0d5ee1603e3
SSDEEP
3072:vNk/RlEDyjPIU/rOqyai/9n04covizQ8:lCRlKyjgeOqcu/2
Checks for missing Authenticode signature.
resource |
---|
22c82aa200b914978730ae4e49aed283_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
GetUserNameA
RegDeleteKeyA
RegEnumValueA
CloseHandle
CreateEventA
CreateFileA
CreateProcessA
CreateThread
DeleteFileA
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetSystemTime
GetTempPathA
GetTickCount
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
LoadLibraryA
OpenEventA
ReadFile
ResetEvent
ResumeThread
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesA
SetFilePointer
Sleep
SystemTimeToFileTime
VirtualAlloc
VirtualFree
WaitForSingleObject
WriteFile
GetLocalTime
GetEnvironmentVariableA
GetLocaleInfoA
GetTimeZoneInformation
GetVersion
GetWindowsDirectoryA
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
GetCurrentProcess
GetDiskFreeSpaceA
GetDriveTypeA
GetFileTime
GetLogicalDrives
SetFileTime
CreateMutexA
ReleaseMutex
CreatePipe
DuplicateHandle
GetExitCodeProcess
PeekNamedPipe
TerminateProcess
TerminateThread
FormatMessageA
GetFileType
GetPrivateProfileSectionA
MoveFileA
WritePrivateProfileSectionA
HeapReAlloc
getsockname
shutdown
recv
listen
inet_ntoa
connect
bind
WSAAsyncSelect
send
inet_addr
ioctlsocket
closesocket
accept
WSAStartup
WSAGetLastError
WSACleanup
WSACancelAsyncRequest
WSAAsyncGetHostByName
WSAAsyncGetHostByAddr
socket
PostMessageA
OemToCharBuffA
CharToOemBuffA
ExitWindowsEx
EnumWindows
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
ShowWindow
SetWindowsHookExA
SendMessageA
RegisterClassA
PostThreadMessageA
PeekMessageA
OpenClipboard
MsgWaitForMultipleObjects
MessageBoxA
IsClipboardFormatAvailable
CallNextHookEx
CloseClipboard
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
FindWindowA
GetActiveWindow
GetClassLongA
GetClassNameA
GetClipboardData
GetMessageTime
GetParent
GetWindowTextA
GetWindowThreadProcessId
ShellExecuteA
DebugBreakpoint
DebugInit
Init
InitService
SpawnedInit
Uninstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ