_vf10@4
_vf11@4
_vf4@4
_vf5@4
_vf6@4
_vf7@4
Static task
static1
Behavioral task
behavioral1
Sample
34c92b717ae97bc926f56ba56a44f24a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
34c92b717ae97bc926f56ba56a44f24a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
34c92b717ae97bc926f56ba56a44f24a_JaffaCakes118
Size
61KB
MD5
34c92b717ae97bc926f56ba56a44f24a
SHA1
ccaf3c6bf0c73564d0bf19c92b8d25008ffffbfa
SHA256
6e60d85b35f5e9222375f606e4116b38364a4a943596ddb0d914cf1cf4791774
SHA512
2a9eb63837db128c9e036976d903ebd925e6952ab6bf4efa0e370e79f9fefe0ed6e44e4ab444f56ace1149f4dd14797f568e8827e7cebd1e5581dcf309f9745a
SSDEEP
768:3YBjSWR3lyicJ7EYI4RLzpZbX2LEdTTESWkPvzckKlrJFiIn45rfJtDa:+hrcPIaF1X24JakPvzup2b5rB
Checks for missing Authenticode signature.
resource |
---|
34c92b717ae97bc926f56ba56a44f24a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryW
GetSystemDirectoryW
lstrcatA
lstrcpyA
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
FreeLibrary
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
RtlUnwind
InterlockedExchange
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CreateFileA
CloseHandle
FlushFileBuffers
LocalAlloc
GetModuleHandleW
GetProcAddress
GetEnvironmentStringsW
GetCurrentProcess
RaiseException
GetKeyboardLayout
GetWindowThreadProcessId
GetForegroundWindow
GetFocus
CallNextHookEx
RegisterWindowMessageW
IsWindow
PostMessageW
UnhookWindowsHookEx
GetKeyboardLayoutNameW
GetKeyState
GetAsyncKeyState
ActivateKeyboardLayout
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
_vf10@4
_vf11@4
_vf4@4
_vf5@4
_vf6@4
_vf7@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ