WHInit
WHUninit
Static task
static1
Behavioral task
behavioral1
Sample
2a5f9b54cbf98d5a79767df01c2f98ae_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2a5f9b54cbf98d5a79767df01c2f98ae_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2a5f9b54cbf98d5a79767df01c2f98ae_JaffaCakes118
Size
192KB
MD5
2a5f9b54cbf98d5a79767df01c2f98ae
SHA1
e033b31be769e2a105d31cab66a557cf8f3461e9
SHA256
fe40998b1fd54d75e933c993a220014b502ed2fb4b3d92449a23bc0de4ffb744
SHA512
dbf8f0d306206a89011a36bb23fe9eed918b55180f564a55e0eb154856eb30eb4e668eb4379ed15d8cc538ef6795aba08d161690ee32a550b842b9d84f7b1bf1
SSDEEP
3072:owLBaEa175KZed4JEDSfvkwevBksB4tca3vhWZAR5:rPOK3qD8sDBksDQDR
Checks for missing Authenticode signature.
resource |
---|
2a5f9b54cbf98d5a79767df01c2f98ae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnumProcesses
GetModuleBaseNameA
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
Netbios
GetStringTypeW
GetStringTypeA
WriteConsoleW
MultiByteToWideChar
CreateProcessA
FreeEnvironmentStringsA
lstrcpyA
lstrlenA
GetEnvironmentStrings
lstrcmpA
GetLastError
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WriteFile
ReadFile
CreateFileA
GetFileSize
OpenFile
GetPrivateProfileIntA
GetWindowsDirectoryA
WritePrivateProfileStringA
GetLocalTime
GetPrivateProfileStringA
SetEndOfFile
SetFilePointer
lstrcatA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcess
OpenMutexA
WaitForSingleObject
ReleaseMutex
LocalFree
OpenProcess
Module32Next
Module32First
CreateToolhelp32Snapshot
CreateThread
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
GetEnvironmentVariableA
WideCharToMultiByte
lstrlenW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
Sleep
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
CreateMutexA
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
ExitProcess
HeapCreate
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapAlloc
HeapFree
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
VirtualFree
HeapReAlloc
HeapDestroy
SendMessageTimeoutA
GetSystemMetrics
GetParent
SetPropA
GetPropA
CallWindowProcA
SetWindowLongA
RegisterWindowMessageA
DispatchMessageA
TranslateMessage
SetTimer
KillTimer
GetAncestor
GetClassNameA
wsprintfA
PostThreadMessageA
SetWindowPos
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetMessageA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorA
CoCreateInstance
CoInitialize
SysAllocStringLen
VariantClear
VariantInit
SysFreeString
SysAllocString
VarCmp
WHInit
WHUninit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ