CoInstall
CoInstall2
CoRun
CoUnInstall
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
30dc19e5a05b0f723b4231277b323ffa_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
30dc19e5a05b0f723b4231277b323ffa_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
30dc19e5a05b0f723b4231277b323ffa_JaffaCakes118
Size
32KB
MD5
30dc19e5a05b0f723b4231277b323ffa
SHA1
15b7eae8be29fc294655cacdce09545edf770e21
SHA256
9e0a462e0a00dc077c03ca219093e918a6115e27ea1df98d9c878b13d30d180c
SHA512
fad78b51a5fe4305c19e6b33f0cd68e0023facf6f20d86608f485d35036cfc7cab886aa964e7f239820f10bdb2e3b48b528838f9bb42edb634c89244358ff01e
SSDEEP
384:2lX/Ja+y/AHmvYYAux3jfQQeYATf0eDsouRSGLnlBu4ydM6qa:0/Ja+2xVAuxzfzJouRxLnlBu4ydM6
Checks for missing Authenticode signature.
resource |
---|
30dc19e5a05b0f723b4231277b323ffa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetEndOfFile
Process32Next
WriteFile
lstrcpyA
CreateFileA
GetTempFileNameA
GetTempPathA
Process32First
CreateToolhelp32Snapshot
lstrcpynA
lstrcatA
GetSystemDirectoryA
GetWindowsDirectoryA
GetVersionExA
Sleep
PeekNamedPipe
CreateProcessA
CreatePipe
lstrlenA
LocalFree
LocalAlloc
GetVolumeInformationA
GetDriveTypeA
GetLogicalDriveStringsA
CopyFileA
SetFilePointer
GetFileTime
SetFileAttributesA
SetFileTime
FindClose
FindNextFileA
FindFirstFileA
MoveFileA
CreateDirectoryA
RemoveDirectoryA
lstrcmpA
lstrcmpiA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
CreateThread
FreeLibrary
GetModuleHandleA
CompareFileTime
GetLocalTime
SystemTimeToFileTime
CreateEventA
OpenEventA
GetSystemDefaultLCID
GetComputerNameA
GetFileSize
ReadFile
DeleteFileA
OpenProcess
TerminateProcess
GetFileAttributesA
CloseHandle
IsWindowVisible
EnumWindows
GetWindowTextA
GetWindowThreadProcessId
RegEnumKeyA
RegCloseKey
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
send
recv
htons
socket
connect
inet_addr
WSAStartup
gethostbyname
WSACleanup
closesocket
SHDeleteValueA
SHDeleteKeyA
SHCopyKeyA
PathRenameExtensionA
PathStripPathA
StrStrIA
StrToIntA
URLDownloadToCacheFileA
CoInstall
CoInstall2
CoRun
CoUnInstall
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ