GetPluginInfo
PluginFunc
Static task
static1
Behavioral task
behavioral1
Sample
3c64527f8f5fa22c556467fafb68d49b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c64527f8f5fa22c556467fafb68d49b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3c64527f8f5fa22c556467fafb68d49b_JaffaCakes118
Size
92KB
MD5
3c64527f8f5fa22c556467fafb68d49b
SHA1
864343935a8f351a718757c3b60c2678fbebecea
SHA256
c3762cd0c8703c12d8446f1c22d31c6fd1c83e029aefd5cfc43fbe3ca6243b34
SHA512
25dd9dfa81b5f651ec84259e02b94432ae7ff1e02df5f2e71dc8c228d58655b6e10fa8769bfdb34cc7400d4eee09bc6523c95325cbe081c2e6ce98a90a0d27af
SSDEEP
1536:n8UZsv9INF3WZvLu2I9Tl84tnN+oxzAkeolX:VZs9ImpM/ZIideo
Checks for missing Authenticode signature.
resource |
---|
3c64527f8f5fa22c556467fafb68d49b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapAlloc
GetVersionExA
ExitThread
GetExitCodeThread
CloseHandle
WaitForMultipleObjects
CreateThread
Sleep
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
SetLastError
GetTickCount
GetLastError
GetPrivateProfileStringA
CreateFileA
LCMapStringA
LCMapStringW
InterlockedIncrement
EnterCriticalSection
TlsSetValue
SetEndOfFile
GetOEMCP
GetACP
SetFilePointer
ReadFile
GetStringTypeW
GetStringTypeA
GetCPInfo
SetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
TlsGetValue
TlsFree
TlsAlloc
InterlockedDecrement
RtlUnwind
GetCurrentThreadId
LeaveCriticalSection
HeapFree
GetLocalTime
HeapReAlloc
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcess
TerminateProcess
FlushFileBuffers
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
VirtualAlloc
HeapSize
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
TranslateMessage
wsprintfA
PeekMessageA
DispatchMessageA
sendto
inet_ntoa
htonl
recv
setsockopt
__WSAFDIsSet
select
gethostbyname
gethostname
socket
inet_addr
bind
WSAIoctl
closesocket
WSAGetLastError
ntohs
htons
ntohl
gethostbyaddr
GetPluginInfo
PluginFunc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ