KillNDrv
KillRU
Static task
static1
Behavioral task
behavioral1
Sample
4a2d160646f72c00019f83c2190cd42f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a2d160646f72c00019f83c2190cd42f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4a2d160646f72c00019f83c2190cd42f_JaffaCakes118
Size
108KB
MD5
4a2d160646f72c00019f83c2190cd42f
SHA1
c5542e2388b45a38ec8e025bdeb49ce750292efd
SHA256
c8684a806271ff20d02c6ad66182c576d7712bd4b13a4d108ff507ea3ca2f058
SHA512
a7173d5507eff32a850f42cfde2fed62811c0e86a17e334b6ac105388c2822f9121936d12e98d5e78a715fad9471f9fa6d05ecb597a45b6780498be59f36a0ff
SSDEEP
1536:K56ZH/EKOHaVUFhfEy5Xf72CW5nj2rTaM7rUtXPtnm:9ZOiwLW57M7It/5
Checks for missing Authenticode signature.
resource |
---|
4a2d160646f72c00019f83c2190cd42f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PostMessageA
IsWindow
GetTopWindow
PostThreadMessageA
GetWindowThreadProcessId
EnumWindows
GetThreadLocale
FlushFileBuffers
TerminateProcess
OpenFileMappingA
MapViewOfFile
GetWindowsDirectoryA
UnmapViewOfFile
GetSystemDirectoryA
GetCommandLineA
GetModuleHandleA
OpenProcess
GetLastError
WaitForSingleObject
Sleep
GetVersionExA
CloseHandle
GetVersion
LoadLibraryA
HeapFree
SetFilePointer
WideCharToMultiByte
MultiByteToWideChar
WriteFile
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
InitializeCriticalSection
GetProcessHeap
GetModuleFileNameA
CreateFileA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
HeapSize
InterlockedExchange
VirtualAlloc
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
VariantChangeType
VariantInit
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
KillNDrv
KillRU
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ