AddFeature
ApplyUpdates
ApplyUpdatesEx
ApplyUpdatesExRD
IsBrowserIntegrated
MaintenanceRepair
MigrateUserRegistry
MigrateUserRegistryEx
RemoveFeature
RemoveUpdates
RemoveUpdatesEx
RemoveUpdatesExRD
SetupUpdaterForReboot
UpdateCache
ValidateInstaller
Static task
static1
Behavioral task
behavioral1
Sample
5b58d68466e620db1621acd95a9f56ac_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b58d68466e620db1621acd95a9f56ac_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5b58d68466e620db1621acd95a9f56ac_JaffaCakes118
Size
260KB
MD5
5b58d68466e620db1621acd95a9f56ac
SHA1
749d2fc415cec6ae8a197f6c74f9301b03dd1672
SHA256
71218c27f9992654b01a1afe741a71d6be8d1fdeaa9a1839c377b0f364fb142d
SHA512
b38a2f4edd26ea1e6a67e2abd087dd23148759e65cdbdb39054690240238246997a0a639a55256a2bbe105bfe220c5b41cde9e0e0aad571fa27d1c31503ff6f1
SSDEEP
6144:Fyd5n7l/QgaDrdU9WmIA9WS5dROUrwNtUnhX:Ad59aHdUUKfROlN
Checks for missing Authenticode signature.
resource |
---|
5b58d68466e620db1621acd95a9f56ac_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHDeleteKeyA
ord210
ord49
ord115
ord158
ord116
ord130
ord11
ord73
ord91
ord31
ord159
ord160
ord117
ord112
ord8
ord15
ord110
GetStringTypeW
GetStringTypeA
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
lstrcatA
lstrcpyA
lstrcmpA
lstrlenA
FindClose
FindNextFileA
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
SetLastError
WideCharToMultiByte
MultiByteToWideChar
GetACP
DeleteFileA
GetVersionExA
GetLastError
GetCurrentProcess
GetLocaleInfoA
GetTimeZoneInformation
InitializeCriticalSection
LoadLibraryA
CompareStringA
FindFirstFileA
RtlUnwind
FileTimeToSystemTime
FileTimeToLocalFileTime
SetEnvironmentVariableA
CompareStringW
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
LCMapStringA
LCMapStringW
Sleep
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
RegCreateKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegSetValueExA
RegCreateKeyExA
RegFlushKey
RegCloseKey
AddFeature
ApplyUpdates
ApplyUpdatesEx
ApplyUpdatesExRD
IsBrowserIntegrated
MaintenanceRepair
MigrateUserRegistry
MigrateUserRegistryEx
RemoveFeature
RemoveUpdates
RemoveUpdatesEx
RemoveUpdatesExRD
SetupUpdaterForReboot
UpdateCache
ValidateInstaller
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ