NP_GetEntryPoints
NP_GetMIMEDescription
NP_Initialize
NP_Shutdown
Static task
static1
Behavioral task
behavioral1
Sample
4bb2db54fcc0ccaddff50a15a81aa4be_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4bb2db54fcc0ccaddff50a15a81aa4be_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4bb2db54fcc0ccaddff50a15a81aa4be_JaffaCakes118
Size
194KB
MD5
4bb2db54fcc0ccaddff50a15a81aa4be
SHA1
f8034f655760c491e9ca99d801989b440c706f50
SHA256
6d0645e048b6ae378de62da995dc9bbd311e2c1ff0809b5e318c6a20bc8c5db5
SHA512
1ec36df47cc35440a122e43a33ec36e6ce253ed05b92c0ffc52d54e22dd0e838b72be6ae9c79d393f30becc8d1cb6d160836f7dea6ab8c0fbaf3da3a2d1ec18a
SSDEEP
3072:TuqGKZoEULlxp7mv0puQ2LT4taqiTBfRX+Emobs/3Z5lHoao:hrZLULLEAuZLKaqiTBJ7mobsvp5o
Checks for missing Authenticode signature.
resource |
---|
4bb2db54fcc0ccaddff50a15a81aa4be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrNCatA
StrToIntA
StrCmpNIA
wnsprintfA
StrRChrA
StrStrA
StrStrIA
OpenMutexA
CloseHandle
GetProcAddress
GetLastError
SetEvent
WaitForSingleObject
lstrcmpiA
CreateFileMappingA
MapViewOfFile
ResetEvent
Sleep
GetComputerNameA
GetVolumeInformationA
GetTickCount
HeapFree
CreateThread
TerminateThread
CreateMutexA
ReleaseMutex
GetModuleHandleA
HeapAlloc
LocalFree
GetCurrentProcess
CreateEventA
GetConsoleMode
GetConsoleCP
SetFilePointer
lstrcpynA
GetProcessHeap
LoadLibraryA
FreeLibrary
lstrlenA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetCurrentProcessId
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
IsValidCodePage
HeapSize
ExitProcess
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
WriteFile
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetNamedSecurityInfoA
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegCreateKeyA
NP_GetEntryPoints
NP_GetMIMEDescription
NP_Initialize
NP_Shutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ