IsRunning
Start
StartByHostEx
Stop
Static task
static1
Behavioral task
behavioral1
Sample
2a264d09d1f0570ef64e50356adab852_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2a264d09d1f0570ef64e50356adab852_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2a264d09d1f0570ef64e50356adab852_JaffaCakes118
Size
64KB
MD5
2a264d09d1f0570ef64e50356adab852
SHA1
a345f0bdf630f9126253f1d5f799aa60307f69ad
SHA256
6a9b63ae9e13915f38b830c4de7904238de8bf1a4918992e06b8b70828ee2617
SHA512
4bda61f4b92cb4485f18b42f7d0a54727ed45c2395e1099a29164576f80f85d375c0cf8a6394942c2fbde1b014950c4b07b990b5277263c3a504812b988b8f27
SSDEEP
1536:61Qxi9thuIyYa5iCcXM3+yBeaWWfJjJpdRxTB:c9hyR5iCU52BjJpdRxV
Checks for missing Authenticode signature.
resource |
---|
2a264d09d1f0570ef64e50356adab852_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetOpenUrlA
InternetGetConnectedState
InternetCloseHandle
HttpQueryInfoA
InternetOpenA
InternetReadFile
ord6394
ord2107
ord700
ord913
ord5594
ord398
ord4189
ord801
ord6143
ord541
ord354
ord665
ord3790
ord6383
ord1253
ord342
ord1182
ord3789
ord5861
ord1158
ord5572
ord2915
ord603
ord1969
ord5819
ord273
ord668
ord1980
ord3185
ord3178
ord2781
ord2770
ord356
ord5440
ord5450
ord2841
ord3663
ord3810
ord3227
ord3054
ord3425
ord3880
ord6779
ord940
ord5710
ord939
ord4202
ord6877
ord2764
ord860
ord6282
ord6283
ord540
ord1228
ord823
ord389
ord3229
ord6059
ord5204
ord1075
ord5808
ord5356
ord2393
ord1247
ord1105
ord5683
ord4129
ord858
ord6930
ord4277
ord535
ord941
ord2818
ord825
ord800
ord537
ord1168
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
atoi
strrchr
strncat
rename
memmove
sprintf
strncpy
_snprintf
_stricmp
strchr
malloc
free
atol
__CxxFrameHandler
_strlwr
WinExec
GetProcAddress
LoadLibraryA
GetCurrentThreadId
lstrlenA
GetVersionExA
CopyFileA
DeleteFileA
GetModuleFileNameA
CloseHandle
FreeLibrary
GetModuleHandleA
GetComputerNameA
DeviceIoControl
CreateFileA
GlobalFree
GlobalAlloc
Sleep
InterlockedIncrement
Process32Next
Process32First
CreateToolhelp32Snapshot
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetTempPathA
GetSystemDirectoryA
CreateDirectoryA
MultiByteToWideChar
SendMessageTimeoutA
RegisterWindowMessageA
IsWindow
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
SetTimer
SendMessageA
GetPropA
FindWindowExA
DefWindowProcA
ShowWindow
CreateWindowExA
RegisterClassExA
SetPropA
RemovePropA
WindowFromPoint
UnhookWindowsHookEx
PostThreadMessageA
SetWindowsHookExA
GetActiveWindow
CallNextHookEx
EnumChildWindows
GetClassNameA
PostMessageA
GetFocus
GetParent
RegCloseKey
RegOpenKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegEnumKeyA
RegOpenKeyExA
CoCreateInstance
SysAllocStringLen
SysFreeString
gethostbyname
inet_addr
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
PathFindFileNameA
Netbios
IsRunning
Start
StartByHostEx
Stop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ