WHInit
WHUninit
Static task
static1
Behavioral task
behavioral1
Sample
477e66dacf7eaf4fad3306b3e4dc74e0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
477e66dacf7eaf4fad3306b3e4dc74e0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
477e66dacf7eaf4fad3306b3e4dc74e0_JaffaCakes118
Size
156KB
MD5
477e66dacf7eaf4fad3306b3e4dc74e0
SHA1
ef32e08f6ae2f906cff215df43d72cff96ae0d4d
SHA256
b2a14f6c091d42c059f77377f7a49e0f6214e7b77117be343517499e328a89c1
SHA512
2d1356a8dce544fb9e67cf5482e32e90cebe270103f044ac1c4ec4abaecc70d16fd134a5dccfb21fa986101ec705ec607806020443eecd15ff51a4f1d6049bc8
SSDEEP
3072:/22Nnkxczb0ONcy78O7kaqaUnychNtYN:ugkxccO2HOYatU2
Checks for missing Authenticode signature.
resource |
---|
477e66dacf7eaf4fad3306b3e4dc74e0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnumProcesses
GetModuleBaseNameA
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
Netbios
GetStringTypeW
GetStringTypeA
SetStdHandle
MultiByteToWideChar
CreateProcessA
FreeEnvironmentStringsA
lstrcpyA
lstrlenA
GetEnvironmentStrings
lstrcmpA
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WriteFile
ReadFile
CreateFileA
GetFileSize
GetLastError
OpenFile
GetPrivateProfileIntA
GetWindowsDirectoryA
WritePrivateProfileStringA
GetLocalTime
GetPrivateProfileStringA
SetEndOfFile
SetFilePointer
lstrcatA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcess
OpenMutexA
CreateMutexA
ReleaseMutex
LocalFree
OpenProcess
Module32Next
Module32First
CreateToolhelp32Snapshot
CreateThread
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
GetEnvironmentVariableA
WideCharToMultiByte
TerminateProcess
lstrlenW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
Sleep
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WaitForSingleObject
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
ExitProcess
HeapCreate
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapAlloc
HeapFree
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
VirtualFree
HeapReAlloc
HeapDestroy
SendMessageTimeoutA
GetSystemMetrics
GetParent
SetPropA
GetPropA
CallWindowProcA
SetWindowLongA
RegisterWindowMessageA
TranslateMessage
DispatchMessageA
SetTimer
KillTimer
GetAncestor
GetClassNameA
wsprintfA
PostThreadMessageA
SetWindowPos
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetMessageA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorA
CoCreateInstance
CoInitialize
SysAllocStringLen
VariantClear
VariantInit
SysFreeString
SysAllocString
VarCmp
WHInit
WHUninit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ