Startup
e
iep
l
r
Static task
static1
Behavioral task
behavioral1
Sample
5b2a22e80ae3cad0d19ca86d042edc50_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5b2a22e80ae3cad0d19ca86d042edc50_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
5b2a22e80ae3cad0d19ca86d042edc50_JaffaCakes118
Size
44KB
MD5
5b2a22e80ae3cad0d19ca86d042edc50
SHA1
eb95ca74748a284b58f404666c973823b0f8883d
SHA256
229dd8fc024df76f018b0af805c5233bc0b4fef16795417c5663dc899ba83278
SHA512
09654f1f580830d8bc7aeb0ffeed450d34b7a9acb1bbfa3dae891c92689ffbc3c8881e9b1fbcfb51f38a609b821bd9154842ec8908e97dbb027fd84894a9a4c9
SSDEEP
384:yRXZFDQNGT3XELMn9IEs7Gp7P3dZp4FeK5e9piXPMovhT0L4D01ObBOltZ6MvnbY:a3SqXELMnjxDpOfMoyL4WXMkfs/H
Checks for missing Authenticode signature.
resource |
---|
5b2a22e80ae3cad0d19ca86d042edc50_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wcschr
_itow
towupper
towlower
_strnicmp
toupper
tolower
strlen
memcpy
NtQueryInformationProcess
_snwprintf
wcscpy
wcslen
isalnum
_wtoi
wcscspn
_wcsnicmp
memset
_chkstk
OpenProcess
LoadLibraryA
GetProcAddress
FreeLibrary
CreateEventW
CloseHandle
lstrcpynA
CreateFileW
GetFileSize
ReadFile
SetFilePointer
SetEndOfFile
WriteFile
GetTickCount
lstrlenA
lstrcpyA
lstrcmpiA
lstrcatW
lstrlenW
WideCharToMultiByte
lstrcatA
lstrcpyW
GetLastError
lstrcpynW
lstrcmpiW
ResetEvent
WaitForSingleObject
SetEvent
InterlockedDecrement
SetErrorMode
GetFileAttributesW
CreateProcessW
SuspendThread
TerminateThread
CreateThread
Sleep
GetModuleFileNameW
FreeLibraryAndExitThread
LoadLibraryW
OpenMutexW
CreateMutexW
GetCurrentProcess
VirtualAlloc
VirtualFree
DisableThreadLibraryCalls
ExitProcess
Process32NextW
MultiByteToWideChar
Process32FirstW
CreateToolhelp32Snapshot
GetVersionExW
CopyFileW
CreateWaitableTimerW
SetWaitableTimer
GetCurrentThread
GetFileTime
SetFileTime
lstrcmpW
MoveFileW
MoveFileExW
WaitForMultipleObjects
VirtualQuery
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetSystemInfo
FindFirstFileW
FindNextFileW
FindClose
GetSystemWindowsDirectoryW
GetVolumeInformationW
GetSystemTime
SetWindowsHookExW
PostMessageW
CallNextHookEx
GetForegroundWindow
PeekMessageW
DispatchMessageW
TranslateMessage
MsgWaitForMultipleObjects
wsprintfW
RegSetValueExW
RegEnumValueW
RegQueryInfoKeyW
RegFlushKey
RegCreateKeyExW
RegNotifyChangeKeyValue
RegOpenKeyExW
RegQueryValueExW
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
OpenProcessToken
SetNamedSecurityInfoW
RegCloseKey
SHGetSpecialFolderPathW
ord680
SHGetFolderPathW
CoTaskMemFree
StringFromCLSID
CoCreateGuid
Startup
e
iep
l
r
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ