NSGetModule
NSModule
Static task
static1
Behavioral task
behavioral1
Sample
2f88aa0a00b5a2ec3c737926621914cb_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f88aa0a00b5a2ec3c737926621914cb_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f88aa0a00b5a2ec3c737926621914cb_JaffaCakes118
Size
2.0MB
MD5
2f88aa0a00b5a2ec3c737926621914cb
SHA1
813e27cda2779c1f3324657ca50aed90503b27f0
SHA256
b78830a1e61f661cce791676bd011af0fade7f2f4150ebf4c371589efdfe3e5b
SHA512
8ee5f468aa7c14f07d5b3c77716f035bf2d5f5a1a5f44a3b1363a1d3a223dc28fc738ea3b693c1f9d2c26c78866b9738263d3d8604fc4e92083ec1aceec75c17
SSDEEP
49152:X6uq2+YSpV0+CpJ01Hh+cjvvTJSZA0kkDC:XPSQ+CpJ01lsZ
Checks for missing Authenticode signature.
resource |
---|
2f88aa0a00b5a2ec3c737926621914cb_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NS_GetComponentManager
NS_GetServiceManager
NS_Alloc
NS_Free
NS_CStringContainerFinish
NS_CStringSetData
NS_CStringContainerInit
NS_StringContainerFinish
NS_StringContainerInit2
NS_StringContainerInit
NS_CStringGetData
NS_StringGetData
PR_AtomicDecrement
PR_AtomicIncrement
TlsSetValue
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
SetEnvironmentVariableA
CompareStringW
WriteConsoleW
GetProcessHeap
SetEndOfFile
SetStdHandle
IsValidLocale
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryA
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
CreateFileW
GetFullPathNameW
SetFilePointer
ReadFile
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
LoadLibraryW
GetStringTypeW
InterlockedCompareExchange
InterlockedExchange
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
RtlUnwind
GetSystemTimeAsFileTime
RaiseException
GetCurrentThreadId
GetCommandLineA
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
HeapFree
GetDriveTypeW
FindFirstFileExW
GetCPInfo
GetTimeFormatW
GetDateFormatW
LCMapStringW
HeapAlloc
TlsAlloc
TlsGetValue
TlsFree
GetModuleHandleW
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
HeapSize
ExitProcess
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetFullPathNameA
CloseHandle
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
GetCurrentDirectoryW
FlushFileBuffers
IsWindowVisible
IsWindow
SetWindowLongW
VariantInit
VariantClear
SysAllocString
SysFreeString
NSGetModule
NSModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ