CreateObject
GetHandlerProperty
GetHandlerProperty2
GetMethodProperty
GetNumberOfFormats
GetNumberOfMethods
SetLargePageMode
Static task
static1
Behavioral task
behavioral1
Sample
48fb2a3c2acb820737d4192d06176a68_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48fb2a3c2acb820737d4192d06176a68_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
48fb2a3c2acb820737d4192d06176a68_JaffaCakes118
Size
587KB
MD5
48fb2a3c2acb820737d4192d06176a68
SHA1
488417bdc6651207511bed9623507a3dc73df64a
SHA256
2d204904b83701224355456ae1d6a600bfdbaa590acde72bd073f64bbcbc096a
SHA512
9c3dd608bdd5dd60dedf1afeaf5c06fca1d9d3cad71ed555448578849bf159e1a1b00155a9d7771719223e75a77c84120f7ebdbc109f72ecdb64b2e7897b1240
SSDEEP
12288:ICR0sfbz8QwSOh+PBFayDTAZju0sBdZ7ATm8:I9GX8JSOM5FayDTAZa0GdZ7G9
Checks for missing Authenticode signature.
resource |
---|
48fb2a3c2acb820737d4192d06176a68_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CharPrevExA
CharPrevA
CharNextA
CharLowerW
CharLowerA
CharUpperW
CharUpperA
SysFreeString
SysAllocStringByteLen
VariantCopy
VariantClear
SysAllocString
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
strcmp
memset
memcmp
_purecall
memmove
memcpy
__CxxFrameHandler
free
_CxxThrowException
malloc
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreA
ResetEvent
SetEvent
CreateEventA
WaitForSingleObject
VirtualFree
VirtualAlloc
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FileTimeToLocalFileTime
DeleteCriticalSection
LocalFileTimeToFileTime
GetVersionExA
WaitForMultipleObjects
EnterCriticalSection
LeaveCriticalSection
FileTimeToDosDateTime
DosDateTimeToFileTime
GetModuleHandleA
GetProcAddress
GetSystemInfo
CompareFileTime
WriteFile
ReadFile
MultiByteToWideChar
WideCharToMultiByte
GetLastError
CloseHandle
SetFileAttributesA
DeleteFileA
GetTempPathA
GetTempFileNameA
CreateFileA
CreateObject
GetHandlerProperty
GetHandlerProperty2
GetMethodProperty
GetNumberOfFormats
GetNumberOfMethods
SetLargePageMode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ