CLIFIL
CLISAM
EQLKEY
EQLREC
FRSREC
GETVLEN
GTVLEN
INTISAMX
NXTREC
OPNIFIL
RDVREC
REDVREC
Static task
static1
Behavioral task
behavioral1
Sample
3053dd4378c2df2071520f956501c01b_JaffaCakes118.dll
Resource
win7-20240705-en
Target
3053dd4378c2df2071520f956501c01b_JaffaCakes118
Size
304KB
MD5
3053dd4378c2df2071520f956501c01b
SHA1
3bacf73191e5cc4e7e34b2e2046c2bb6dac36297
SHA256
dc4c30a0ba29f7ee048a5c34f8f96f8939bc289bae641df139355f8836cd3c94
SHA512
bb89c063d537874dc618aafdcaeb5459b5b3b34922e4535eeda7019944ad0dc95b8bfcdc33c431685ca9475b31e396df6a605549d29ddaa33b5a8afb121748ab
SSDEEP
3072:E2FYqvdYWkwhhBU5sMA8NLQdkUZea9s28vwFG46yD4GImhdrVsmNxuPN1gxtsksx:1FXjeNXypKpsDLIgVs1NO3sk+8KxU2
Checks for missing Authenticode signature.
resource |
---|
3053dd4378c2df2071520f956501c01b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetFilePointer
GetProcAddress
GetModuleHandleA
TlsSetValue
GetCurrentThreadId
HeapReAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapAlloc
HeapFree
GetLastError
ReadFile
GetTimeZoneInformation
GetSystemTime
GetLocalTime
DeleteFileA
MoveFileA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
GetStringTypeA
WideCharToMultiByte
GetStringTypeW
MultiByteToWideChar
SetStdHandle
GetFileType
SetHandleCount
GetStdHandle
GetStartupInfoA
ExitProcess
GetLocaleInfoA
GetLocaleInfoW
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetFileAttributesA
CloseHandle
CreateFileA
GetCurrentProcessId
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
SetEndOfFile
LoadLibraryA
FlushFileBuffers
wvsprintfA
MessageBoxA
CLIFIL
CLISAM
EQLKEY
EQLREC
FRSREC
GETVLEN
GTVLEN
INTISAMX
NXTREC
OPNIFIL
RDVREC
REDVREC
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE