AddRegistry
Download
Static task
static1
Behavioral task
behavioral1
Sample
8801db1bf0b4ffb87a2b4bf30baba941_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8801db1bf0b4ffb87a2b4bf30baba941_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8801db1bf0b4ffb87a2b4bf30baba941_JaffaCakes118
Size
48KB
MD5
8801db1bf0b4ffb87a2b4bf30baba941
SHA1
ed8f098ebc7cd58f5a79dcb00471ff6048697438
SHA256
57d78b30c64de7465e080d5edde2038bef2b55244e55dfe39ad0d79b99f0ccb9
SHA512
32fc10789e98863e319e11bdbb642398aa878a5e98cadcc9d158bb8c2a90a3e48090f7724b8aa804b5d41468ea77bc4db262d875b61680276f94155efb5126ad
SSDEEP
768:75vW9WP8vtSc3XUg6jpRbRX1rJ+Rmk1SbsSiCApy5JYV:VCW2AvR1lrJISYCAg5OV
Checks for missing Authenticode signature.
resource |
---|
8801db1bf0b4ffb87a2b4bf30baba941_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateWaitableTimerW
WaitForSingleObject
SetWaitableTimer
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
RaiseException
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
CoInitializeSecurity
CoCreateInstance
CoInitializeEx
AddRegistry
Download
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ