NP_GetEntryPoints
NP_GetMIMEDescription
NP_Initialize
NP_Shutdown
Static task
static1
Behavioral task
behavioral1
Sample
6649e32acedc1e8a9b760798be5745a3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6649e32acedc1e8a9b760798be5745a3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6649e32acedc1e8a9b760798be5745a3_JaffaCakes118
Size
194KB
MD5
6649e32acedc1e8a9b760798be5745a3
SHA1
7f8a16238aa88898bb5c059972c9946b929f3e7f
SHA256
bc9e7f7996b0906c1a41de71ebad04b299f356a4f2cf56e0e46dafd5f29c79b1
SHA512
86648ce9e22c267271cfeb1db4b50e87a922c2baaac75571faa390c071e125648aeb6afcd775285ae6cd512196195bb1dc00e7b61283a898f76f2afbc1c018af
SSDEEP
3072:n+eGkPKudLgxp7mv0puQ2LT4taY1iTBfRX+t/RbR/hAZ5mHoa3:JBPTdLYEAuZLKa8iTBJ6/RbRCS53
Checks for missing Authenticode signature.
resource |
---|
6649e32acedc1e8a9b760798be5745a3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrNCatA
StrToIntA
StrCmpNIA
wnsprintfA
StrRChrA
StrStrA
StrStrIA
OpenMutexA
CloseHandle
GetProcAddress
GetLastError
SetEvent
WaitForSingleObject
lstrcmpiA
CreateFileMappingA
MapViewOfFile
ResetEvent
Sleep
GetComputerNameA
GetVolumeInformationA
GetTickCount
HeapFree
CreateThread
TerminateThread
CreateMutexA
ReleaseMutex
GetModuleHandleA
HeapAlloc
LocalFree
GetCurrentProcess
CreateEventA
GetConsoleMode
GetConsoleCP
SetFilePointer
lstrcpynA
GetProcessHeap
LoadLibraryA
FreeLibrary
lstrlenA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetCurrentProcessId
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
IsValidCodePage
HeapSize
ExitProcess
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
WriteFile
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetNamedSecurityInfoA
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegCreateKeyA
NP_GetEntryPoints
NP_GetMIMEDescription
NP_Initialize
NP_Shutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ