OnFireFoxUserData
Start
Stop
TmStart
TmStop
Static task
static1
Behavioral task
behavioral1
Sample
6f97dd86681a415118ebdd9a25e60597_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f97dd86681a415118ebdd9a25e60597_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6f97dd86681a415118ebdd9a25e60597_JaffaCakes118
Size
348KB
MD5
6f97dd86681a415118ebdd9a25e60597
SHA1
8d45e5735f1635d9e0037f1d9b1393f89d652c46
SHA256
5e869543c3aadf1c64b0660089496dd6767d2af35d7e3872139f16199d4689c2
SHA512
1fef299827ac54064c821b00f3ab992d48df6a5b0540eb4705b5b303b5ef894404b0529d2148d41a56ee0a75c379f5ef5965ae0ccb6be6dae797226baaeaab97
SSDEEP
6144:RTFGd6nI+y/Sv5YlnT5pDlV1L16tkvvf23SaINGY:8cI+Oln1pDlctkvAIN
Checks for missing Authenticode signature.
resource |
---|
6f97dd86681a415118ebdd9a25e60597_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Netbios
InternetSetOptionA
HttpAddRequestHeadersA
HttpQueryInfoA
InternetReadFileExA
InternetCrackUrlA
InternetOpenA
InternetConnectA
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetSetStatusCallback
ImageDirectoryEntryToData
UuidCreate
RpcStringFreeA
UuidToStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
lstrcpyA
lstrcmpiA
lstrlenA
WaitForSingleObject
WriteProcessMemory
GetCurrentProcess
GetProcAddress
GetModuleHandleA
LocalFree
MoveFileA
ReadFile
GetFileSize
DeleteFileA
CloseHandle
WriteFile
SetFilePointer
CreateFileA
GetFileAttributesA
lstrcatA
GetTempFileNameA
GetWindowsDirectoryA
GetLocalTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventA
SetEvent
SetEndOfFile
GetLastError
FreeLibrary
GetStringTypeA
Sleep
TerminateThread
GetSystemTime
CreateThread
CreateMutexA
ReleaseMutex
GetTickCount
GetModuleFileNameA
GetSystemDirectoryA
GetTempPathA
GetPrivateProfileStringA
WritePrivateProfileStringA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateDirectoryA
lstrcpynA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetLocaleInfoA
HeapReAlloc
VirtualAlloc
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
LoadLibraryA
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetStdHandle
HeapSize
GetConsoleCP
OpenDesktopA
SetThreadDesktop
CloseDesktop
GetMessageA
TranslateMessage
DispatchMessageA
SetTimer
PostThreadMessageA
wsprintfA
KillTimer
GetSecurityDescriptorSacl
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegOpenKeyExA
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
ShellExecuteExA
CoUninitialize
CoInitialize
OnFireFoxUserData
Start
Stop
TmStart
TmStop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ