DefineFileType
insert_to_table
Static task
static1
Behavioral task
behavioral1
Sample
473c23270627530ef499d722cf81ac15_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
473c23270627530ef499d722cf81ac15_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
473c23270627530ef499d722cf81ac15_JaffaCakes118
Size
100KB
MD5
473c23270627530ef499d722cf81ac15
SHA1
616dcc44b94ffb7eb464c59878eb54896411f47c
SHA256
0be2fb8cc19806ff4712aa4c05f13d2ddb52297f37d312dd7ab0dc999ba48745
SHA512
c74a5e77da1123c3f066d5fc9cc144d28707d881029554867d11be2a399872649b58e00e94244b2178f09d57f28a85e17cac239db6a60fcea663bf9dd0c0ca6b
SSDEEP
1536:vSGf4Mwk3ADN2szR/lXFJrki3kBKzUjdT65CqkMCQ0Dn5d:vSGf4Mwk3ADbF/ZFFkwdzs9qgDnX
Checks for missing Authenticode signature.
resource |
---|
473c23270627530ef499d722cf81ac15_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException
CloseHandle
ReadFile
CreateFileW
CompareStringW
CompareStringA
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InterlockedExchange
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapSize
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
GetLocaleInfoW
SetEnvironmentVariableA
StgOpenStorage
DefineFileType
insert_to_table
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ