CanUnload2
RMACreateInstance
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
48ac023aea84ef512ee0f22b594ed80e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48ac023aea84ef512ee0f22b594ed80e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
48ac023aea84ef512ee0f22b594ed80e_JaffaCakes118
Size
132KB
MD5
48ac023aea84ef512ee0f22b594ed80e
SHA1
37f46eb48095155e58332fea33c680a650056495
SHA256
1c6131e84b3300a98a6e41dddc8730557faa3dfcd068a19e51caaf372312a774
SHA512
f844d5dc3cb0bc49faa6a905d097b64afa073860cba227d0856905d48aab712838e7698248c87864f7db032ad11ccdbfff4ac7356ca4a183cf52e975e0f1fb3e
SSDEEP
3072:XSupttU7KiWp83lrZLcZUShzN8cZTJjVdwc5iD6T:7tRiWG34ZBhTqc5m6
Checks for missing Authenticode signature.
resource |
---|
48ac023aea84ef512ee0f22b594ed80e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_putenv
_ultoa
_adjust_fdiv
_initterm
tolower
_onexit
__dllonexit
time
localtime
asctime
fopen
printf
fclose
strchr
strrchr
strncmp
_purecall
atol
??2@YAPAXI@Z
??3@YAXPAX@Z
_stat
clock
sscanf
fflush
atoi
rand
sprintf
_stricmp
_vsnprintf
memmove
_ismbcspace
realloc
free
malloc
_mbctype
strstr
fprintf
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
GetWindowLongA
DispatchMessageA
PostQuitMessage
CharNextA
GetSystemMetrics
TranslateMessage
DefWindowProcA
RegisterClassA
CreateWindowExA
SetWindowLongA
DestroyWindow
PeekMessageA
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
SysFreeString
SysAllocString
DeleteFileA
GetProcAddress
FreeLibrary
LoadLibraryA
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
MultiByteToWideChar
lstrlenA
lstrcpyA
GetFileAttributesA
CreateDirectoryA
SetErrorMode
WideCharToMultiByte
CanUnload2
RMACreateInstance
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE