CreateSX
GetOut
Xreloader
Static task
static1
Behavioral task
behavioral1
Sample
4c0aca78cde695c7e4a8d097d8d4b3c1_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c0aca78cde695c7e4a8d097d8d4b3c1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4c0aca78cde695c7e4a8d097d8d4b3c1_JaffaCakes118
Size
98KB
MD5
4c0aca78cde695c7e4a8d097d8d4b3c1
SHA1
6330a0c337fa7f76e17fb648b296327da2941ef6
SHA256
cfb2835dd096fb5df5306266053ffddd99f9e59115fdf7428ccc0f92ee34daef
SHA512
a194ed57478f28d167f9bd27d957dd3cb8306eedbffbd91d41e56e2e1563ed65b2f65b3846e5be9bf590aba4c37573ed1b1d5ac58bb08980a66875f1619947dc
SSDEEP
1536:63oPF5fn6FLyNn6laZWkahXSy+Du/PXg59BpYmX6rwnOGGd+UDis:6svP6Fo6mh6XMu/Y59BdMuLGh
Checks for missing Authenticode signature.
resource |
---|
4c0aca78cde695c7e4a8d097d8d4b3c1_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
lstrcmpiA
ExitProcess
ResumeThread
GetLastError
VirtualProtect
VirtualFree
LoadLibraryA
GetModuleHandleA
VirtualAlloc
CreateThread
SetFileApisToANSI
CloseHandle
UnlockFileEx
LockFileEx
WriteFile
PulseEvent
CreateEventA
lstrlenA
CreateFileA
MessageBoxW
PostQuitMessage
KillTimer
SetCursor
SetCursorPos
GetWindowRect
IsIconic
SetTimer
GetCursorPos
GetDesktopWindow
MessageBoxA
CreateSX
GetOut
Xreloader
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ