AddAtomS
AddAtomT
Entry
Static task
static1
Behavioral task
behavioral1
Sample
28024234c30880ecf146526ca430f9ca_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28024234c30880ecf146526ca430f9ca_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
28024234c30880ecf146526ca430f9ca_JaffaCakes118
Size
187KB
MD5
28024234c30880ecf146526ca430f9ca
SHA1
9e5e5dda6ff1d3e58150854c1a53f4a56c4fd7a9
SHA256
d1b556618691aaab2117adf71fb361d59e2a8c94c50e370df2c574d2ba20cd8c
SHA512
4a63eb466efd3de4f45ffdb403962271ac6b34668d81c794429f48b44136f9005c4e96119cff6b239896b57966d19e94e680ad6c974c5cb2a4bccaf636bbde32
SSDEEP
3072:NxKs2FOrVkwbgFCBXoczloK74MDsP00N9xVKGecslLUze:NxKgrVknFCuwloK+0QxVtKUz
Checks for missing Authenticode signature.
resource |
---|
28024234c30880ecf146526ca430f9ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindNextFileA
DeleteFileA
FindFirstFileA
GetTempFileNameA
GetTempPathA
FreeLibrary
GetProcAddress
LoadLibraryA
UnmapViewOfFile
GetLastError
MapViewOfFile
CreateFileMappingA
GetFileSize
lstrcmpA
SetLastError
GetEnvironmentVariableA
SetFileAttributesA
lstrcatA
OpenEventA
WriteFile
CopyFileA
Sleep
GetVolumeInformationA
GetDriveTypeA
ExitProcess
SetFilePointer
ReadFile
GetModuleHandleA
GetModuleFileNameA
CreateProcessA
GetSystemTime
GetSystemDirectoryA
SetFileTime
GetLocalTime
GetPrivateProfileStringA
FindClose
GetWindowsDirectoryW
GetEnvironmentVariableW
GetComputerNameW
GetTimeZoneInformation
MultiByteToWideChar
lstrcatW
lstrlenW
GetVersionExA
GetComputerNameA
lstrcpyA
GetTickCount
FileTimeToSystemTime
GetWindowsDirectoryA
TerminateProcess
WaitForSingleObject
CreateDirectoryA
CreateMutexA
ReleaseMutex
OutputDebugStringA
GetFileTime
GetDiskFreeSpaceExA
GetDiskFreeSpaceA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
CreateFileA
lstrlenA
GetFileInformationByHandle
CloseHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetFileAttributesA
GetTempPathW
IsBadCodePtr
IsBadReadPtr
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
HeapAlloc
HeapFree
GetFileType
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
GetCurrentProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
TlsAlloc
TlsFree
SetStdHandle
SetEndOfFile
SetHandleCount
GetStdHandle
GetStartupInfoA
FlushFileBuffers
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WideCharToMultiByte
LCMapStringA
LCMapStringW
DefWindowProcA
wsprintfA
RegisterClassExA
CreateWindowExA
SendMessageA
CharLowerBuffA
wsprintfW
GetMessageA
TranslateMessage
DispatchMessageA
RegEnumValueA
RegDeleteValueA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
UuidToStringA
UuidCreate
RpcStringFreeA
inet_ntoa
gethostbyname
WSAStartup
WSACleanup
AddAtomS
AddAtomT
Entry
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ