SliceAPIByProcess
SliceAPIByProcessEx
SliceAPIGlobalProcess
UnSliceAPIByProcess
UnSliceAPIByProcessEx
UnSliceAPIGlobalProcess
Static task
static1
Behavioral task
behavioral1
Sample
5ae09979540864bf2aff6427db5aeabd_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5ae09979540864bf2aff6427db5aeabd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ae09979540864bf2aff6427db5aeabd_JaffaCakes118
Size
72KB
MD5
5ae09979540864bf2aff6427db5aeabd
SHA1
5ef48f7ccd80a42e173e26f459d3a19b3f22896f
SHA256
fc3b5e2c9e3338e6b722dacf49bdc819a0f3504ffca43882300e2c356fb2b38c
SHA512
217c9fd408f7976d3c5743dc1a4def6d00463d0779ea884a6ec97d8272ec84f71743cdaed20adfe5a2e9755a3ac4fe98a0ca5a5cec176dfb9546d38e92523343
SSDEEP
768:EeOdguobPRBQnEDLoYsAfiGjrgaWva7mGKflzXUbn1lK42PpORyOAthM/XOe:EXd4bPRoUjsAfldWC7mXUbq5xXthMf
Checks for missing Authenticode signature.
resource |
---|
5ae09979540864bf2aff6427db5aeabd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetLastError
GetModuleHandleA
FreeLibrary
VirtualProtect
VirtualQuery
WideCharToMultiByte
CreateProcessW
CreateProcessA
GetModuleFileNameA
GetProcAddress
SetLastError
WriteProfileStringA
GetProfileStringA
LeaveCriticalSection
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetCurrentProcessId
GetCurrentProcess
Sleep
CreateThread
FormatMessageA
EnterCriticalSection
DeleteCriticalSection
CloseHandle
InitializeCriticalSection
HeapAlloc
HeapFree
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
ExitProcess
WriteFile
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
RaiseException
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
wsprintfA
SendMessageA
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
SliceAPIByProcess
SliceAPIByProcessEx
SliceAPIGlobalProcess
UnSliceAPIByProcess
UnSliceAPIByProcessEx
UnSliceAPIGlobalProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ