DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
66cf4157605d7c274fac57f382c81c50_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66cf4157605d7c274fac57f382c81c50_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
66cf4157605d7c274fac57f382c81c50_JaffaCakes118
Size
111KB
MD5
66cf4157605d7c274fac57f382c81c50
SHA1
e236e0a0a2df1741d4ada73c31dd0d4703586d19
SHA256
3debde619eea6ba2603167edaa7f6011128554679edda1f1bdd206922b46af2f
SHA512
af466e1358dd75fdf2c10567d8ae4bff315c01973b1a4fb159eee3540748b13d2414d652f5e040393aa29da4c8a6dbf75ee909e3acc1f0811ba31b21d8f24968
SSDEEP
3072:eM3yPgY2oovSssV5tCN9Ra70BgQCtXg/mAZPPq4ZRr3dJK0tJ:eEmgY2oovSssV6Y7Cg+/tPPq4Hdg0X
Checks for missing Authenticode signature.
resource |
---|
66cf4157605d7c274fac57f382c81c50_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
StrRChrA
StrStrIA
CryptHashData
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptCreateHash
CryptAcquireContextA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegOpenKeyA
SetServiceStatus
GetUserNameA
CharLowerA
CharNextA
LoadStringA
wvsprintfA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
CloseHandle
lstrlenA
GetModuleHandleA
GetStringTypeExA
GetThreadLocale
lstrcmpA
ReadFile
GetFileSize
CreateFileA
VirtualQuery
Sleep
SystemTimeToFileTime
GetCurrentProcessId
UnmapViewOfFile
ReleaseMutex
WaitForSingleObject
DuplicateHandle
GetCurrentProcess
OpenProcess
MapViewOfFileEx
VirtualFree
IsBadReadPtr
GetLastError
GetFileTime
GetVolumeInformationA
OpenFileMappingW
lstrlenW
GetComputerNameA
GetProcAddress
LoadLibraryA
FreeLibrary
GetSystemTime
GetModuleFileNameA
lstrcpynA
MoveFileExA
GetTickCount
GetVersionExA
FreeLibraryAndExitThread
CreateThread
CreateEventA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetEnvironmentStringsW
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
QueryPerformanceCounter
HeapReAlloc
RtlLookupFunctionEntry
RtlUnwindEx
GetModuleHandleW
ExitProcess
GetCommandLineA
HeapFree
HeapSetInformation
HeapCreate
HeapAlloc
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
RaiseException
RtlPcToFileHeader
HeapSize
WriteFile
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetStartupInfoA
OleUninitialize
CoCreateInstance
OleInitialize
StringFromGUID2
HttpOpenRequestA
HttpSendRequestA
InternetQueryDataAvailable
InternetConnectA
InternetGetConnectedState
InternetCheckConnectionA
InternetReadFile
InternetOpenA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ