NP_GetEntryPoints
NP_GetMIMEDescription
NP_Initialize
NP_Shutdown
Static task
static1
Behavioral task
behavioral1
Sample
3f7e87124f19a61984e9d3f98c526d6a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f7e87124f19a61984e9d3f98c526d6a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3f7e87124f19a61984e9d3f98c526d6a_JaffaCakes118
Size
195KB
MD5
3f7e87124f19a61984e9d3f98c526d6a
SHA1
e74a7f50c6b6a17af599c3e20720c434986406f7
SHA256
a9bb53b747c877f38b3c1f44c0baa250ffe94be4e5fc0ca0c8e6caa015ab1884
SHA512
ea1b14c133a35a9714d24f9f21ff5bb68771c32b05c1cd532dc8f0e97478767f3d7a5a57451e403909f1b36f8d3a83417df91dc6f264a6a954b3ca2143881dad
SSDEEP
3072:Mhb1yjYsFkrZ7PG8jbn44W/0fY4GC8WTBfRgNp2EEdg53eqc:Y1yDF4g8PU8gTC8WTBJ6p2E8SH
Checks for missing Authenticode signature.
resource |
---|
3f7e87124f19a61984e9d3f98c526d6a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrStrA
StrNCatA
wnsprintfA
StrToIntA
StrRChrA
StrStrIA
StrCmpNIA
OpenMutexA
CloseHandle
GetProcAddress
GetLastError
SetEvent
WaitForSingleObject
lstrcmpiA
CreateFileMappingA
MapViewOfFile
ResetEvent
Sleep
InterlockedIncrement
InterlockedDecrement
GetComputerNameA
GetVolumeInformationA
HeapFree
GetTickCount
GetCurrentProcessId
CreateThread
TerminateThread
CreateMutexA
ReleaseMutex
GetModuleHandleA
LocalFree
GetCurrentProcess
CreateEventA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
lstrcpynA
GetProcessHeap
LoadLibraryA
FreeLibrary
lstrlenA
WriteConsoleW
CreateFileA
FlushFileBuffers
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapAlloc
GetLocaleInfoW
SetFilePointer
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
WriteFile
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
IsValidCodePage
HeapSize
ExitProcess
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetNamedSecurityInfoA
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegSetValueExA
RegCreateKeyExA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
VariantClear
NP_GetEntryPoints
NP_GetMIMEDescription
NP_Initialize
NP_Shutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ