TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
452ef0dc67d8530b61b41a5ec0267551_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
452ef0dc67d8530b61b41a5ec0267551_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
452ef0dc67d8530b61b41a5ec0267551_JaffaCakes118
Size
8.1MB
MD5
452ef0dc67d8530b61b41a5ec0267551
SHA1
cb2dad8fabae007ed8caecbd24870d35a87d31e0
SHA256
b8d70ee17b9dd5dccc88fc7760c80d2a4df077ac11080c1bf924a324786200a3
SHA512
d8a6775307c01554a14aee651e2eb29f109ca21769ee0b03e7019edc0da75bde48097d5c6ac5b13eb3fb752a037230998969bd46a8e08b85bc953e42f4a83d8e
SSDEEP
196608:BlqF8ut9+ZnKCxy21IeDD7dJrek7h2tu6mAMTN7:/qF7tvCxX53PFHp
Checks for missing Authenticode signature.
resource |
---|
452ef0dc67d8530b61b41a5ec0267551_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DocumentPropertiesW
ChooseColorW
ImageList_GetImageInfo
ExtractIconW
CopyImage
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
strncpy
GetVersion
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
gethostbyaddr
IsEqualGUID
GdiplusShutdown
BASS_Init
AddFontMemResourceEx
WTSSendMessageW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ