DFunc
ExportFunc
IsPassSucess2
Pass2
Static task
static1
Behavioral task
behavioral1
Sample
604c8b4f2f82e016cff74ebc4a359e34_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
604c8b4f2f82e016cff74ebc4a359e34_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
604c8b4f2f82e016cff74ebc4a359e34_JaffaCakes118
Size
184KB
MD5
604c8b4f2f82e016cff74ebc4a359e34
SHA1
4f2b3c4f11d3e01d9565c13e1636113d2062e4ae
SHA256
adb5aecc46f0bceb86e6498d3fd873fc6ab501247521bea529b4a8c9df84ca02
SHA512
3e944f4a4fd19f32862be8b4ffa3533a3b97aaa2b0dc91db1813133c8c0205379032da7c2a4c60dbe8810975501d707fe74bdf8fdf83f8683bc7b2d71ae77ef6
SSDEEP
3072:TQHKEPyt1uHPMetkxLTxXOuMh1Vgax51ClVyr0sxQVO1nhssEvx0fdvAP:Tumt1uHPMe6LTRzMh1eC1CCW8+nvmfp
Checks for missing Authenticode signature.
resource |
---|
604c8b4f2f82e016cff74ebc4a359e34_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CreateThread
FreeLibrary
CreateEventA
GetLastError
GetModuleFileNameA
DeleteFileA
GetCurrentProcess
GetSystemDirectoryA
GetFileTime
CreateSemaphoreA
GetWindowsDirectoryA
ResetEvent
CancelIo
SetEvent
lstrlenA
lstrcpynA
ExitThread
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
LoadLibraryW
WaitForSingleObject
CopyFileA
lstrcpyA
ExitProcess
DeviceIoControl
GetVersionExA
GetProcAddress
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
WriteFile
SetFilePointer
GetLocalTime
GetFileAttributesA
Sleep
ProcessIdToSessionId
LoadLibraryA
SetLastError
HeapReAlloc
HeapAlloc
MoveFileA
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RtlUnwindEx
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
DecodePointer
EncodePointer
HeapFree
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetModuleHandleW
GetStdHandle
GetModuleFileNameW
FlsGetValue
FlsFree
FlsAlloc
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
GetConsoleCP
GetConsoleMode
HeapSize
GetStringTypeW
SetStdHandle
WriteConsoleW
CreateFileW
FlushFileBuffers
GetComputerNameA
TerminateThread
GetProcessHeap
InitializeCriticalSection
VirtualProtect
IsBadReadPtr
CreateFileA
VirtualAlloc
CloseHandle
VirtualFree
ReleaseSemaphore
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
CoCreateInstance
CoUninitialize
CoInitialize
inet_addr
inet_ntoa
ntohs
socket
htons
sendto
WSAGetLastError
closesocket
gethostbyname
htonl
getservbyname
gethostbyaddr
getservbyport
WSASetLastError
WSAStartup
WSACleanup
WSAIoctl
setsockopt
send
shutdown
select
connect
ioctlsocket
recv
getsockname
bind
recvfrom
WTSQuerySessionInformationA
WTSEnumerateSessionsA
WTSFreeMemory
DFunc
ExportFunc
IsPassSucess2
Pass2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ