CreateABHList
CreatePGHDict
DisableDLV
DisableOFR
DisableSHR
EnableDLV
EnableOFR
EnableSHR
FreeABHData
GetSML
GetWPF
ReadVBInfo
RestoreSMLData
WriteVBInfo
Static task
static1
Behavioral task
behavioral1
Sample
5ecad23b3ae7365a25b11d4d608adffd_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ecad23b3ae7365a25b11d4d608adffd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ecad23b3ae7365a25b11d4d608adffd_JaffaCakes118
Size
808KB
MD5
5ecad23b3ae7365a25b11d4d608adffd
SHA1
9e5dd712722e3ca96fce6c092b83e787e3dfa001
SHA256
a72681756346e338e96b3deb8304f5c4a3a0b83c8ed2d9f1444cb229e0e0453b
SHA512
4720b120b00100a5923740a0382e988cfec7bebb9ff8b017963fd9b0abf83dd8e85761172ba65de7bc7d93c5a249d47c507e318220ba1004504e8c11dab9ecb3
SSDEEP
12288:CzOQeyh78IrXbXHQr/fBdYinxl9DuHTUPpBJ:iOQe47BLniJDuHTURBJ
Checks for missing Authenticode signature.
resource |
---|
5ecad23b3ae7365a25b11d4d608adffd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTickCount
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
TerminateThread
SuspendThread
ResumeThread
OpenThread
GetExitCodeThread
InterlockedIncrement
GetCurrentThreadId
SetErrorMode
SetFilePointer
FindClose
CloseHandle
SetEndOfFile
FileTimeToLocalFileTime
GetFileInformationByHandle
SetFileAttributesW
GetFileTime
LocalFileTimeToFileTime
SetFileTime
WriteFile
ReadFile
GetFullPathNameW
CreateFileW
FlushFileBuffers
GetFileSize
GetLastError
FindFirstFileW
SetEnvironmentVariableW
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
SetEvent
ResetEvent
CreateEventW
OpenEventW
LocalFree
GetCurrentProcess
GetModuleHandleW
GetProcAddress
GetVersionExA
SetLastError
OpenMutexW
CreateMutexA
CreateMutexW
ReleaseMutex
ExitThread
GetVersion
ProcessIdToSessionId
CreateFileMappingW
lstrcatW
lstrcpynA
HeapAlloc
HeapFree
GetProcessHeap
IsBadReadPtr
GetSystemDirectoryW
lstrcpynW
GetModuleFileNameW
SystemTimeToFileTime
GetSystemTime
SetThreadContext
QueueUserAPC
GetThreadContext
RemoveDirectoryW
GetExitCodeProcess
MoveFileExW
GetShortPathNameW
GetFileAttributesW
LoadLibraryW
GetVolumeInformationW
TerminateProcess
DeleteFileW
CreateProcessW
CopyFileW
GetLongPathNameW
OpenProcess
VirtualAllocEx
SearchPathW
lstrlenA
IsBadStringPtrA
lstrcmpiA
GetModuleHandleA
GetWindowsDirectoryW
GetTempFileNameW
GetTempPathW
GetCurrentDirectoryW
VirtualFreeEx
ReadProcessMemory
VirtualProtectEx
VirtualQueryEx
UnmapViewOfFile
FreeLibrary
DuplicateHandle
WaitForMultipleObjectsEx
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
MapViewOfFile
OpenFileMappingW
FindNextFileW
Thread32First
Thread32Next
CreateToolhelp32Snapshot
CreateEventA
WaitForMultipleObjects
lstrlenW
LocalAlloc
InterlockedExchange
LoadLibraryA
RaiseException
GetCommandLineA
CreateThread
RtlUnwind
GetCurrentThread
HeapSize
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
IsDebuggerPresent
LCMapStringA
LCMapStringW
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
SetConsoleCtrlHandler
InitializeCriticalSection
GetLocaleInfoA
GetLocaleInfoW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateABHList
CreatePGHDict
DisableDLV
DisableOFR
DisableSHR
EnableDLV
EnableOFR
EnableSHR
FreeABHData
GetSML
GetWPF
ReadVBInfo
RestoreSMLData
WriteVBInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ