AddReply
HandleEventHook
RegisterCallback
Static task
static1
Behavioral task
behavioral1
Sample
5cb0760946d69043f4733978903e4ef1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5cb0760946d69043f4733978903e4ef1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5cb0760946d69043f4733978903e4ef1_JaffaCakes118
Size
101KB
MD5
5cb0760946d69043f4733978903e4ef1
SHA1
1e1508cf90ef287e6b9176405ce5f5c7f524245b
SHA256
9a1333919b4df392d192ac1c8780bffe4641f0d9c19dde7e2e89cc965f78d113
SHA512
ce747b56322e420e36260c0da3d8e9f245ff12927d0f0a9faa2c7cac0577617510cbd69fb38960f34a08d643ac4daf51350c6b587d868b1c8c89bc51e357a3cf
SSDEEP
3072:ih8tYi6Bm56BDP9tvt3IYBDlt5HxxTcS:PtAxIYVlLxxt
Checks for missing Authenticode signature.
resource |
---|
5cb0760946d69043f4733978903e4ef1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemTime
CloseHandle
WaitForSingleObject
FindClose
FindNextFileA
DeleteFileA
RemoveDirectoryA
FindFirstFileA
MultiByteToWideChar
CreateFileA
CreateDirectoryA
SetFileAttributesA
GetFullPathNameA
ExitThread
Sleep
CreateThread
ReadFile
SetFilePointer
GetFileSize
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
GetModuleHandleA
MoveFileA
GetCurrentDirectoryA
GetModuleFileNameA
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryA
GetLocaleInfoA
VirtualQuery
GetLastError
GetFileType
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
SetHandleCount
GetStdHandle
GetStartupInfoA
SetStdHandle
SetEndOfFile
LCMapStringA
WideCharToMultiByte
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
VirtualAlloc
HeapReAlloc
FlushFileBuffers
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
VirtualProtect
GetSystemInfo
RtlUnwind
PostThreadMessageA
SendMessageA
DispatchMessageA
PeekMessageA
TranslateMessage
CoUninitialize
CoInitialize
CoCreateInstance
AddReply
HandleEventHook
RegisterCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ