CheckDOM
CheckPOST
IAlloc
WantPOST
Static task
static1
Behavioral task
behavioral1
Sample
75a44ada57a5d537ec54a50f324e5770_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
75a44ada57a5d537ec54a50f324e5770_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
75a44ada57a5d537ec54a50f324e5770_JaffaCakes118
Size
392KB
MD5
75a44ada57a5d537ec54a50f324e5770
SHA1
7e5fe774b2d5496ecd787fc1a6fa1f689dc8bbc8
SHA256
440464bf3e75437ec12c0245236d1c0ab6b23b0339bd1efab1bcae758c97658b
SHA512
2851d966ead4634f1e954ebc69f7f7f4d11f140fb3ed6d4d17c669b3e675b39e95d9876acb326ec50ea6947eee2e6104dfa74042ab053a1c45caa5333445b145
SSDEEP
6144:/s9qp911HIA6i5jKl2Z/4nOoBFDQTBJSgAtnr16y:/d1ljQQgtBFDQTrkX6
Checks for missing Authenticode signature.
resource |
---|
75a44ada57a5d537ec54a50f324e5770_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
RaiseException
GetLocaleInfoA
VirtualProtect
CloseHandle
SetFilePointer
ReadFile
Sleep
CreateFileA
WriteFile
MultiByteToWideChar
GetTickCount
GetFileSize
GetLastError
OutputDebugStringA
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
InterlockedDecrement
WideCharToMultiByte
lstrlenA
InterlockedIncrement
GetProcAddress
FreeLibrary
LoadLibraryA
LockResource
LoadResource
SizeofResource
FindResourceA
HeapAlloc
HeapFree
InitializeCriticalSection
HeapCreate
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
DeleteCriticalSection
GetTimeZoneInformation
GetACP
TerminateProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RtlUnwind
GetSystemTimeAsFileTime
VirtualAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeFormatA
GetDateFormatA
HeapSize
HeapReAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCPInfo
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
VirtualFree
LoadStringA
IsWindow
CoInitialize
CoUninitialize
CoCreateInstance
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
VariantInit
SysAllocString
SysFreeString
CheckDOM
CheckPOST
IAlloc
WantPOST
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ