SisCSFilesToBackupForLink
SisCreateBackupStructure
SisCreateRestoreStructure
SisFreeAllocatedMemory
SisFreeBackupStructure
SisFreeRestoreStructure
SisRestoredCommonStoreFile
SisRestoredLink
Static task
static1
Behavioral task
behavioral1
Sample
319844e5456b110096af80872016d042_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
319844e5456b110096af80872016d042_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
319844e5456b110096af80872016d042_JaffaCakes118
Size
161KB
MD5
319844e5456b110096af80872016d042
SHA1
4f671008176e380f710c422c6751aca58e92aff5
SHA256
0334137eb34cb0913e02a124b6d799d937f48ff95e18b11a7c505cad7421ea16
SHA512
4276f1fd12091f4e1c4ae21799b65a06f1ec3283b9f6513b5a62d7a104eea609fcf54ed38cfeb79165045bede7ffce8abc1d408fcd1c1939a37bf9031e190316
SSDEEP
3072:GfTjlL17dIVdZybBE0Sk8uhrkOkXRxK+cdbbRJB44jpW5wMRooZxi0vDGTRUupx:GfTN17dIQbBEzkNkXjKPBPE5wM3ZxZe
Checks for missing Authenticode signature.
resource |
---|
319844e5456b110096af80872016d042_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??2@YAPAXI@Z
wcscat
wcscpy
malloc
_except_handler3
?terminate@@YAXXZ
__CxxFrameHandler
free
??3@YAXPAX@Z
wcsrchr
memmove
wcslen
NtQueryInformationFile
RtlNtStatusToDosError
NtSetInformationFile
RpcStringFreeW
UuidToStringW
UuidFromStringW
ReadFile
SetEndOfFile
GetFileAttributesW
SetFileAttributesW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetDiskFreeSpaceW
InitializeCriticalSection
SetFilePointer
WriteFile
CreateFileW
DeviceIoControl
CloseHandle
GetLastError
SisCSFilesToBackupForLink
SisCreateBackupStructure
SisCreateRestoreStructure
SisFreeAllocatedMemory
SisFreeBackupStructure
SisFreeRestoreStructure
SisRestoredCommonStoreFile
SisRestoredLink
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ