?AttachModule@@YGXPBUModuleInfo@@@Z
?CallCore@@YGXXZ
Init
Static task
static1
Behavioral task
behavioral1
Sample
4b955519e3948142d7242504ff3a4e40_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b955519e3948142d7242504ff3a4e40_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4b955519e3948142d7242504ff3a4e40_JaffaCakes118
Size
222KB
MD5
4b955519e3948142d7242504ff3a4e40
SHA1
9cda2b46bc59d063ec4c5108b3f4abc2f0968338
SHA256
5df7909f22305a5b8882b50baa27a4f9c0bd728348f654419c56c7a96645568d
SHA512
dd8280da93f6e21e70fd52df33e90a8a21034bfcae1ca85e7ce43230315431635ef4d365a7b73be9bc7673b3f8b4c64ff17f71754fdf5c2e2ede412604cf6a7f
SSDEEP
6144:Opghd8w93+LvzDQayw+qmujhgUqGzm6pp1SM1TA:34Kayw+uXzB1S
Checks for missing Authenticode signature.
resource |
---|
4b955519e3948142d7242504ff3a4e40_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpiA
lstrcmpA
lstrcpynA
CreateEventA
GetFileAttributesA
lstrcatA
GetEnvironmentVariableA
FindFirstFileA
GetLastError
CopyFileA
SetFileAttributesA
FindClose
OpenEventA
FindNextFileA
GetCurrentProcessId
SetEvent
CreateThread
FlushFileBuffers
ResetEvent
WaitForMultipleObjects
GetModuleFileNameA
MoveFileExA
SetFilePointer
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
lstrcpyA
GetTempPathA
CloseHandle
GetVersionExA
DeleteCriticalSection
LoadLibraryA
GetTempFileNameA
GetProcAddress
IsBadWritePtr
CreateProcessA
OpenProcess
InitializeCriticalSection
WriteFile
FreeLibrary
CreateFileA
lstrlenA
Sleep
GetTickCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
CreateEventW
GetComputerNameExA
GetCurrentThreadId
GetCommandLineA
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
RaiseException
CheckTokenMembership
CryptExportKey
CryptAcquireContextW
CryptReleaseContext
CryptImportKey
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
CryptGetHashParam
FreeSid
AllocateAndInitializeSid
CryptHashData
CryptDestroyHash
CryptDecrypt
CryptDestroyKey
CryptGenKey
CryptCreateHash
CryptEncrypt
CryptStringToBinaryA
CryptBinaryToStringA
GetModuleBaseNameA
EnumProcessModules
EnumProcesses
__WSAFDIsSet
connect
htons
recv
shutdown
send
socket
closesocket
WSAStartup
WSAGetLastError
select
ioctlsocket
gethostbyname
DnsFree
DnsQuery_A
?AttachModule@@YGXPBUModuleInfo@@@Z
?CallCore@@YGXXZ
Init
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ