Callback_OnAfterLoadingPage
Callback_OnBeforeLoadPage3
Callback_OnBeforeProcessUrl
FreeMem
Init
IsGlobal
Start
Stop
TakeFreeMem
TakeGetPage
Static task
static1
Behavioral task
behavioral1
Sample
7020f20f7020c4bb1e2aa98b1efd67c6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7020f20f7020c4bb1e2aa98b1efd67c6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
7020f20f7020c4bb1e2aa98b1efd67c6_JaffaCakes118
Size
131KB
MD5
7020f20f7020c4bb1e2aa98b1efd67c6
SHA1
ae692346808063839a86aa5be4e2a7ae72eab070
SHA256
de43939f7984333490ad545fdd4c28a919b9494c8641169491d48c2c2d7051b7
SHA512
3c517e1ad8e2507bda604693404d5691567120e2affc4fc259f59a46cfb98ea81ee1093d23c6e80e1605fcc836a4e83f3ea92935009d6288dcc362b7b0e7f787
SSDEEP
3072:4sz8BSP2nLDBDZDRDBEQGBMNlAgupullAqokS5BH:4s4Y2LDBDZDRDBjGupO
Checks for missing Authenticode signature.
resource |
---|
7020f20f7020c4bb1e2aa98b1efd67c6_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
memchr
memcmp
_chkstk
sprintf
strtoul
memcpy
memset
strlen
_snprintf
_vsnprintf
strcpy
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
SHDeleteValueA
InternetWriteFile
HttpEndRequestA
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetCloseHandle
HttpSendRequestExA
InternetSetOptionA
InternetSetCookieA
HttpAddRequestHeadersA
HttpSendRequestA
InternetQueryDataAvailable
InternetReadFile
InternetQueryOptionA
HeapReAlloc
VirtualAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
CompareStringA
CompareStringW
SetEnvironmentVariableA
WriteFile
GetModuleHandleW
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
OutputDebugStringA
GetCurrentThreadId
GetLastError
HeapFree
HeapValidate
GetProcessHeap
HeapAlloc
SetLastError
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
RaiseException
GetCommandLineA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
WideCharToMultiByte
GetTimeZoneInformation
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
Callback_OnAfterLoadingPage
Callback_OnBeforeLoadPage3
Callback_OnBeforeProcessUrl
FreeMem
Init
IsGlobal
Start
Stop
TakeFreeMem
TakeGetPage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ