GetHash
SetAccessPriv
Static task
static1
Behavioral task
behavioral1
Sample
2ac4074ab16259ba45af0388879dc5f5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ac4074ab16259ba45af0388879dc5f5_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ac4074ab16259ba45af0388879dc5f5_JaffaCakes118
Size
64KB
MD5
2ac4074ab16259ba45af0388879dc5f5
SHA1
2d3fe4352b5d0de5ffbe4d6b7f63cbce506aaac5
SHA256
5cf02407fd86934ddb1a080176942a0df2fb29c574ec6ef49f8b9acd97fce519
SHA512
9c429a080ed56b9488d4cb70d1f58fac973ca2739fa71b4d50e5e38c46f9b482078025fa0578d811ed869246bd873f8f0b1f51925d808c7e76a6bdcca8740ea9
SSDEEP
1536:dqfA6APPXmfRo/naEOT1rrpPwLaiD50l:dq/i2WShrZiD50l
Checks for missing Authenticode signature.
resource |
---|
2ac4074ab16259ba45af0388879dc5f5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
CloseHandle
LocalFree
MultiByteToWideChar
LoadLibraryA
GetCurrentProcess
WriteFile
FlushFileBuffers
DisconnectNamedPipe
ConnectNamedPipe
GetLastError
GetProcAddress
CreateNamedPipeA
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CreateFileA
LookupPrivilegeValueA
AdjustTokenPrivileges
LsaOpenPolicy
LsaQueryInformationPolicy
LsaClose
OpenProcessToken
GetHash
SetAccessPriv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ