CreateBlockReaderInterface
EnumImageFormatAttributeNext
EnumWBSettingRelease
Format
GetDevice
GetItemCount
GetPicture
Static task
static1
Behavioral task
behavioral1
Sample
3cc90a28f0e6d989fc979286368b0b3a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3cc90a28f0e6d989fc979286368b0b3a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3cc90a28f0e6d989fc979286368b0b3a_JaffaCakes118
Size
350KB
MD5
3cc90a28f0e6d989fc979286368b0b3a
SHA1
b3758cc506f3bb915935be3e25f2df151d25e76f
SHA256
d69a4cf9af0bfe73ed2c28757f9eecb6c2ea26813f95ccf043f9a8bc26889833
SHA512
d561904aba6bf86bba592ea959a8bebc1f832e1bbb2d56019ba3f001a37bc885a2bc9676b0f5ea3bbd234307a1ab16e15935bc82227c15960d6c852e62fc295b
SSDEEP
6144:Gq8ePIIx4JHne93YomftV91CgTON7XRQLMoTW22i1LQNxHtmR0H9rjRWpzSX2oCQ:GqXx4hZk0i/meBspzAT
Checks for missing Authenticode signature.
resource |
---|
3cc90a28f0e6d989fc979286368b0b3a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
DeleteCriticalSection
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
InterlockedDecrement
InitializeCriticalSection
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcatA
SetEnvironmentVariableA
ResumeThread
CreateThread
WaitForSingleObject
InterlockedIncrement
lstrcpyA
lstrlenA
CloseHandle
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
IsDBCSLeadByte
lstrcpynA
HeapSize
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetOEMCP
WriteFile
GetEnvironmentStringsW
ExitProcess
TerminateProcess
SetLastError
TlsFree
TlsGetValue
GetVersion
GetCommandLineA
TlsAlloc
GetCurrentProcess
GetEnvironmentStrings
GetSystemTime
GetTimeZoneInformation
GetLocalTime
HeapAlloc
HeapReAlloc
RaiseException
ExitThread
TlsSetValue
HeapFree
RtlUnwind
InterlockedExchange
GetCurrentThreadId
UnhandledExceptionFilter
GetEnvironmentVariableA
Sleep
HeapCreate
VirtualFree
LeaveCriticalSection
GetVersionExA
FreeEnvironmentStringsW
GetACP
CompareStringW
CompareStringA
GetCPInfo
IsBadCodePtr
IsBadReadPtr
GetFileType
GetStdHandle
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetStartupInfoA
IsBadWritePtr
VirtualAlloc
SetHandleCount
LoadStringA
CharNextA
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
CoUninitialize
ProgIDFromCLSID
CoTaskMemFree
CoInitializeEx
CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc
StringFromGUID2
VARIANT_UserFree
SystemTimeToVariantTime
VarDateFromUdate
SafeArrayGetDim
VariantChangeType
SafeArrayDestroy
SafeArrayCreate
SafeArrayGetLBound
SafeArrayGetUBound
VariantInit
SafeArrayAccessData
SafeArrayUnaccessData
VarUI4FromStr
RegisterTypeLi
LoadTypeLi
BSTR_UserUnmarshal
BSTR_UserSize
BSTR_UserMarshal
VARIANT_UserUnmarshal
BSTR_UserFree
VARIANT_UserSize
CreateErrorInfo
SysStringLen
LoadRegTypeLi
VariantCopy
SetErrorInfo
SysAllocStringLen
VariantClear
SysAllocString
SysFreeString
VARIANT_UserMarshal
VarUdateFromDate
CStdStubBuffer_Disconnect
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
IUnknown_QueryInterface_Proxy
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleAllocate
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_Connect
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Invoke
CStdStubBuffer_CountRefs
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
CreateBlockReaderInterface
EnumImageFormatAttributeNext
EnumWBSettingRelease
Format
GetDevice
GetItemCount
GetPicture
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ