GetLspGuid
InstallLspDll
WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
6f4efaa39c0f95089f550294d2e1e805_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f4efaa39c0f95089f550294d2e1e805_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6f4efaa39c0f95089f550294d2e1e805_JaffaCakes118
Size
118KB
MD5
6f4efaa39c0f95089f550294d2e1e805
SHA1
cb6607dc047959ac7626c5e57d8eb9965841c1fc
SHA256
db1818a8a43a1959773ead21896630eff4f3d5a375108edf9060a0538c6976b3
SHA512
a7db1d5016760f3bec920af98c6e10e7f098da381a2d6d878e8e8620c4e18ee78b5456787ee51a9682cef0b5ba691d6959f61d06c617abb5a570c8112d88c28a
SSDEEP
1536:cnWaQaVXMbXRxEjCpIa+VUZv5wq1+QCLdMVGtY0de0U7AtSRri:xaQaijRqjyIPigR0iY6tSRr
Checks for missing Authenticode signature.
resource |
---|
6f4efaa39c0f95089f550294d2e1e805_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateFileA
GetSystemTime
SystemTimeToFileTime
ReadFile
GetCurrentProcess
CloseHandle
GetTickCount
WriteFile
FreeLibrary
GetModuleHandleA
GetModuleFileNameA
MoveFileExA
InitializeCriticalSection
ExitThread
GetCurrentProcessId
GetLastError
CreateThread
ResetEvent
WaitForSingleObject
GetExitCodeThread
SetEvent
CreateEventW
InterlockedIncrement
DebugBreak
MultiByteToWideChar
GetProcAddress
LoadLibraryA
GetVersionExW
ExpandEnvironmentStringsA
GetSystemDirectoryA
ReleaseSemaphore
CreateSemaphoreW
GetQueuedCompletionStatus
PostQueuedCompletionStatus
GetSystemInfo
WaitForSingleObjectEx
CreateIoCompletionPort
WaitForMultipleObjectsEx
HeapAlloc
HeapFree
WideCharToMultiByte
LoadLibraryW
HeapDestroy
HeapCreate
ExpandEnvironmentStringsW
InterlockedDecrement
TlsFree
Sleep
TlsGetValue
TlsAlloc
TlsSetValue
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetFilePointer
RtlUnwind
VirtualAlloc
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
SetLastError
HeapSize
ExitProcess
RaiseException
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
PostQuitMessage
GetMessageW
TranslateMessage
DestroyWindow
DispatchMessageW
DefWindowProcW
RegisterClassW
CreateWindowExW
PostMessageW
IsWindow
UnregisterClassW
CharLowerA
StringFromGUID2
htons
WSAStartup
WSACleanup
WSAGetLastError
WSASetLastError
WSCInstallProvider
WSCWriteProviderOrder
WSCGetProviderPath
WSCDeinstallProvider
WPUCompleteOverlappedRequest
WSCEnumProtocols
inet_addr
UuidCreate
GetModuleBaseNameA
GetLspGuid
InstallLspDll
WSPStartup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ