AddERExcludedApplicationA
AddERExcludedApplicationW
CreateMinidumpW
ReportEREvent
ReportEREventDW
ReportFault
ReportFaultDWM
ReportFaultFromQueue
ReportFaultToQueue
ReportHang
ReportKernelFaultDWW
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
448dfbc4ead5ed67ac2018ecd987f64e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
448dfbc4ead5ed67ac2018ecd987f64e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
448dfbc4ead5ed67ac2018ecd987f64e_JaffaCakes118
Size
84KB
MD5
448dfbc4ead5ed67ac2018ecd987f64e
SHA1
ab6d78cd38cb8d64066ce09e94d07600440690c2
SHA256
423269ebd4b562d7bcbcc2700177fce05a3b55034dad686bbfbbf67e9e6b5b4f
SHA512
621c84233e990dae3a878ba089a376ed23d73f9c6b010cd7f794d0643e351de943f0dfa05aba65c9e5224434b3919dadd25bd01495a88308ee97aa458b1bcde9
SSDEEP
1536:qalj4T7RAnjF3sXOu7eL4rFI6yOoZSLGfh6+6L:tKPRAnNSOuvzGZ8
Checks for missing Authenticode signature.
resource |
---|
448dfbc4ead5ed67ac2018ecd987f64e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetWindowsDirectoryA
GlobalMemoryStatus
lstrcmpiA
GetVersionExA
GetCurrentProcessId
GetLastError
FindNextFileA
lstrcatA
lstrlenA
lstrcpyA
CreateProcessA
DuplicateHandle
GetCurrentProcess
CloseHandle
CreatePipe
DisconnectNamedPipe
WaitForMultipleObjects
TerminateProcess
TerminateThread
CreateThread
WriteFile
WaitForSingleObject
ReadFile
GetFileSize
CreateFileA
OpenProcess
GetSystemDirectoryA
PeekNamedPipe
GetTickCount
GetProcAddress
LoadLibraryA
SetFileTime
GetFileTime
GetCurrentThread
GetDriveTypeA
GetVolumeInformationA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetLocalTime
WinExec
CreateDirectoryA
FindFirstFileA
FindClose
SetCurrentDirectoryA
Sleep
GetCurrentDirectoryA
ExitThread
GetComputerNameA
wsprintfA
ExitWindowsEx
SetServiceStatus
RegisterServiceCtrlHandlerA
RegCreateKeyA
OpenProcessToken
GetUserNameA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetTokenInformation
AdjustTokenPrivileges
LookupPrivilegeValueA
LookupAccountSidA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
_adjust_fdiv
_initterm
_onexit
__dllonexit
_strdup
??3@YAXPAX@Z
malloc
memset
sprintf
strlen
strcpy
_except_handler3
_local_unwind2
fflush
_iob
printf
memcpy
strcat
strncpy
atoi
system
free
_snprintf
fclose
fread
ftell
fseek
fopen
strstr
strcmp
_errno
wcstombs
rand
srand
time
strtok
strchr
fprintf
memcmp
strncat
getpeername
getsockname
WSAStartup
socket
listen
bind
setsockopt
inet_addr
htonl
ntohs
connect
inet_ntoa
recv
send
sendto
accept
gethostname
WSASocketA
WSAGetLastError
WSAIoctl
recvfrom
shutdown
select
__WSAFDIsSet
ioctlsocket
closesocket
htons
gethostbyname
_strnicmp
_stricmp
_strlwr
ZwQuerySystemInformation
_strupr
DeleteUrlCacheEntry
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
AddERExcludedApplicationA
AddERExcludedApplicationW
CreateMinidumpW
ReportEREvent
ReportEREventDW
ReportFault
ReportFaultDWM
ReportFaultFromQueue
ReportFaultToQueue
ReportHang
ReportKernelFaultDWW
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ