NSGetModule
NSModule
Static task
static1
Behavioral task
behavioral1
Sample
74f5b68dfd9cc72ac9f3ddc54374040b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
74f5b68dfd9cc72ac9f3ddc54374040b_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
74f5b68dfd9cc72ac9f3ddc54374040b_JaffaCakes118
Size
2.1MB
MD5
74f5b68dfd9cc72ac9f3ddc54374040b
SHA1
469e24be68dac68507f58f857afae6fd9b732426
SHA256
942d37bbb69a1d469a169c35d21cccf21de21da00afed69875302a06f8ff8741
SHA512
e300f433969197f3a8805725bba4c93af6705f94c888e1957c163c2491711a69b0a9df2f9fb30bbf71af260ec62943a3b9ba03274d9bf7a34af647f025aec8ea
SSDEEP
49152:e5FpusByhnFeFbEwbITwNN7Tn5knwMErWoe:ekZObXbawD2
Checks for missing Authenticode signature.
resource |
---|
74f5b68dfd9cc72ac9f3ddc54374040b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryA
SetEnvironmentVariableA
GetLocaleInfoW
SetEndOfFile
CreateFileA
GetCurrentDirectoryW
CreateFileW
SetStdHandle
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
ReadFile
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
FreeLibrary
LoadLibraryW
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
RaiseException
HeapFree
GetLastError
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetDriveTypeW
FindFirstFileW
HeapAlloc
HeapReAlloc
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
CloseHandle
SetFilePointer
FlushFileBuffers
UnhandledExceptionFilter
GetFullPathNameA
GetCurrentDirectoryA
GetFullPathNameW
IsWindow
SetWindowLongW
IsWindowVisible
NS_StringContainerFinish
NS_StringContainerInit
NS_StringContainerInit2
NS_CStringGetData
NS_CStringContainerFinish
NS_CStringSetData
NS_CStringContainerInit
NS_Free
NS_StringGetData
NS_Alloc
NS_GetServiceManager
NS_GetComponentManager
PR_AtomicDecrement
PR_AtomicIncrement
SysFreeString
VariantClear
SysAllocString
NSGetModule
NSModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ