SprocketDispose
SprocketDisposeContext
SprocketGetProperty
SprocketGetState
SprocketInit
SprocketInitContext
SprocketSetProperty
SprocketStart
SprocketStop
Static task
static1
Behavioral task
behavioral1
Sample
5ca690b7f8b0025e17f424331026dd54_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ca690b7f8b0025e17f424331026dd54_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ca690b7f8b0025e17f424331026dd54_JaffaCakes118
Size
389KB
MD5
5ca690b7f8b0025e17f424331026dd54
SHA1
ac5a32f48c4637effe49d2b432e63c3537fcf218
SHA256
cadabb61857419e5d0608536ef32a4fa2ac0f76e70a708a4edffb76cab2410d8
SHA512
b81a04846d9948c521bc0b0d94aaf95b608494d4c04adbc3bfbcf95ee77662e0895111047cb4db6967f6b14df63b2a2645241c1721e28503c929f2466cc70368
SSDEEP
6144:OOO8YQL0Vp0KqNXzoSUetJzLLNzUPu7SKJOWAtIHFAuC:OBQG8lzoSjJriPXttIls
Checks for missing Authenticode signature.
resource |
---|
5ca690b7f8b0025e17f424331026dd54_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetOEMCP
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Sleep
SetStdHandle
FlushFileBuffers
SetFilePointer
GetProcAddress
LoadLibraryA
ReadFile
GetUserDefaultLCID
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedExchange
QueryDosDeviceA
DefineDosDeviceA
DeviceIoControl
GetACP
GetCPInfo
ExitProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
HeapAlloc
HeapFree
GetVersion
GetCommandLineA
RaiseException
RtlUnwind
CompareFileTime
GetModuleHandleA
FormatMessageA
LocalFree
ExpandEnvironmentStringsA
GetFileAttributesA
SetEvent
GetLastError
CloseHandle
GetStringTypeA
SetEndOfFile
GetFullPathNameA
FindResourceA
LoadResource
LockResource
UnmapViewOfFile
GetTickCount
TransactNamedPipe
WaitNamedPipeA
SetNamedPipeHandleState
CreateEventA
OpenMutexA
OutputDebugStringA
GetCurrentProcessId
FreeLibrary
GetSystemDirectoryA
GetComputerNameA
GetDriveTypeA
GetCurrentDirectoryA
CreateDirectoryA
FindNextFileA
RemoveDirectoryA
SetFileAttributesA
DeleteFileA
MoveFileExA
GetShortPathNameA
GetWindowsDirectoryA
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
FileTimeToLocalFileTime
CopyFileA
QueryPerformanceCounter
SetFileTime
SystemTimeToFileTime
QueryPerformanceFrequency
CreateFileA
GetFileSize
FindClose
FindFirstFileA
GetTempFileNameA
GetTempPathA
GlobalFree
lstrlenA
GetSystemDefaultLangID
GetUserDefaultLangID
SetProcessWorkingSetSize
CreateSemaphoreA
CreateMutexA
GetSystemTimeAsFileTime
EnumWindows
GetWindowThreadProcessId
GetWindowTextA
wsprintfA
LoadStringA
MessageBoxA
MsgWaitForMultipleObjectsEx
DispatchMessageA
TranslateMessage
PostThreadMessageA
PeekMessageA
SendMessageA
inet_addr
gethostbyname
gethostname
WSAGetLastError
WSAStartup
WSACleanup
ioctlsocket
ord1100
ord298
ord3212
RegCloseKey
AllocateAndInitializeSid
LookupAccountSidA
RegEnumKeyExA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
GetUserNameA
RegCreateKeyExA
RegOpenKeyExA
RegEnumValueA
SHGetSpecialFolderPathA
Netbios
SprocketDispose
SprocketDisposeContext
SprocketGetProperty
SprocketGetState
SprocketInit
SprocketInitContext
SprocketSetProperty
SprocketStart
SprocketStop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ