FHard
Install
igwCheckUpdate
igwEndUpdate
igwGetModule
igwInit
igwInitExA
igwInitExW
igwInitialize
igwSupportA
igwSupportExA
igwSupportExW
igwSupportW
igwTerminal
Static task
static1
Behavioral task
behavioral1
Sample
274870781d09b448557a0e7bad8af646_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
274870781d09b448557a0e7bad8af646_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
274870781d09b448557a0e7bad8af646_JaffaCakes118
Size
222KB
MD5
274870781d09b448557a0e7bad8af646
SHA1
aa3f9f0f6d48cb4df16c3d14f0ea9e5c4e6073e8
SHA256
389b767dafeed1053b74a8ff44515577cef2b922441f52467b88b3c2a7b2f4cf
SHA512
54e48dbb67f2cdd09b5d0827d46a9b89071b04ac1ba6f6c1f559c7c1b1219d84fb229301c9531b16a065f2d2c1bcac3639053791b3cae643e5d3c13329df33cf
SSDEEP
3072:kf529f529f529f529f529f529f529f529f529f529f529f5+:a
Checks for missing Authenticode signature.
resource |
---|
274870781d09b448557a0e7bad8af646_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
_initterm
free
_beginthreadex
fseek
strncpy
fread
fclose
strchr
strcpy
atoi
strtok
strrchr
malloc
wcscmp
_stricmp
__CxxFrameHandler
abs
sprintf
strncmp
strcat
fopen
fgets
memcpy
strstr
strlen
??2@YAPAXI@Z
memset
??3@YAXPAX@Z
_strrev
GetCurrentProcessId
CreateMutexA
GetLastError
GetPrivateProfileStringA
GetLogicalDriveStringsA
GetDriveTypeA
lstrlenA
CopyFileA
DeleteFileA
GetFileAttributesA
GetTempFileNameA
MoveFileExA
OpenProcess
TerminateProcess
CreateToolhelp32Snapshot
Process32First
CloseHandle
CreateThread
WideCharToMultiByte
MultiByteToWideChar
GetTempPathA
GetCommandLineA
WritePrivateProfileStringA
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GlobalFree
GlobalUnlock
WriteFile
CreateFileA
GlobalLock
GlobalAlloc
VirtualProtect
GetModuleHandleA
ExitProcess
GetFileSize
Sleep
WaitForSingleObject
Process32Next
GetModuleFileNameA
wsprintfA
GetDC
GetClientRect
GetClassNameA
GetWindowTextA
ReleaseDC
GetWindowRect
GetDesktopWindow
EnumWindows
socket
inet_addr
recv
connect
gethostbyname
send
closesocket
WSAStartup
htons
inet_ntoa
WSACleanup
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
BitBlt
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
GetDeviceCaps
CreateDCA
GdipDisposeImage
GdipAlloc
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdipLoadImageFromFile
GdipSaveImageToFile
GdipCloneImage
GdipFree
URLDownloadToFileA
InternetCloseHandle
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetReadFile
SearchTreeForFile
FHard
Install
igwCheckUpdate
igwEndUpdate
igwGetModule
igwInit
igwInitExA
igwInitExW
igwInitialize
igwSupportA
igwSupportExA
igwSupportExW
igwSupportW
igwTerminal
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ