MTSCanUnloadNow
MTSGetCreatorFunction
MTSRegisterComponent
MTSSetGlobalServices
MTSUnregisterComponent
Static task
static1
Behavioral task
behavioral1
Sample
28b3368fb1d55d32a7a7c0484f868508_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28b3368fb1d55d32a7a7c0484f868508_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
28b3368fb1d55d32a7a7c0484f868508_JaffaCakes118
Size
84KB
MD5
28b3368fb1d55d32a7a7c0484f868508
SHA1
21857bc3dc6c7b66baa2b8e4c8fcd4fdb57781a0
SHA256
963273f60cfd3332f2a76838ed00b9fbc4649e6f032eaed79615a53d67706f1b
SHA512
b19154bdc68619faf257141420b783af61d7549c4f726f8f0fa90f5faa4f4e6cbed51a91af67c8949f3c7ee68a48ce6aa39b5fd0935eb50ca8a6e57565d54dcf
SSDEEP
1536:oRHdEFn1/Xb5PxvaJrYHOLTkC0AmfBc/Xodo0:oRHyF1/r5PBokHO3V/Xodo0
Checks for missing Authenticode signature.
resource |
---|
28b3368fb1d55d32a7a7c0484f868508_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapCreate
GetProcessHeap
Sleep
VirtualAlloc
GetFileAttributesA
GetShortPathNameA
HeapAlloc
HeapReAlloc
CloseHandle
CreateFileA
GetFileSize
ReadFile
WriteFile
FlushFileBuffers
SetFilePointer
DeleteFileA
SetFileAttributesA
GetWindowsDirectoryA
MoveFileExA
GetFileTime
MoveFileA
GlobalAlloc
GlobalFree
GlobalSize
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WideCharToMultiByte
HeapDestroy
HeapFree
VirtualFree
TerminateProcess
GetCurrentProcess
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetProcAddress
GetModuleHandleA
GetCPInfo
LCMapStringA
GetStringTypeA
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
SetEnvironmentVariableA
GetStringTypeW
MultiByteToWideChar
LCMapStringW
RtlUnwind
CompareStringA
CompareStringW
MTSCanUnloadNow
MTSGetCreatorFunction
MTSRegisterComponent
MTSSetGlobalServices
MTSUnregisterComponent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE