AgiError
AgiFlushError
AgiLibClose
AgiLibOpen
AgiOldlib
AgiValVersion
AgiValidate
ErhLastError
ErhQueryErrFilter
ErhQueryMaxWarning
ErhQueryVersion
ErhQueryWarnings
ErhSetErrFilter
ErhSetMaxWarning
Static task
static1
Behavioral task
behavioral1
Sample
667cf1fccf2570854232b8ccd601811c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
667cf1fccf2570854232b8ccd601811c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
667cf1fccf2570854232b8ccd601811c_JaffaCakes118
Size
166KB
MD5
667cf1fccf2570854232b8ccd601811c
SHA1
2ef12a99b084d576d8892b7b6319500bedead4d9
SHA256
243ace80e584af5f619faa938dd191addd2a28d74e871ac5e90da40d9f6d1c6b
SHA512
628743e9efd302240a1ae7959191f4e30aedf3bde1807be2a89c5dd4d4ff4fa124b08ddb9b7586df93979838134dd0aaf3c337b55f1f51a1650dc1f1a041a479
SSDEEP
3072:4oNeoPhmpCLmLggxoNWc9OvgFv/vzqCH6Ioyfi6I/AzDsTzLm:xLkCLmcgyNXO0jlH6IXfbk9zL
Checks for missing Authenticode signature.
resource |
---|
667cf1fccf2570854232b8ccd601811c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetStdHandle
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetLastError
FlushFileBuffers
WriteFile
CloseHandle
GetModuleFileNameA
WideCharToMultiByte
ReadFile
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LoadLibraryA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetLocaleInfoW
AgiError
AgiFlushError
AgiLibClose
AgiLibOpen
AgiOldlib
AgiValVersion
AgiValidate
ErhLastError
ErhQueryErrFilter
ErhQueryMaxWarning
ErhQueryVersion
ErhQueryWarnings
ErhSetErrFilter
ErhSetMaxWarning
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ