?CallDiskAccessInt@@YAHEGGGPAEK@Z
?CallGetDOSMem@@YAHPAEJ@Z
?CallGetMCBRoot@@YAHXZ
Static task
static1
Behavioral task
behavioral1
Sample
854c1c4d03f603b75eeb71ba1b754161_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
854c1c4d03f603b75eeb71ba1b754161_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
854c1c4d03f603b75eeb71ba1b754161_JaffaCakes118
Size
460KB
MD5
854c1c4d03f603b75eeb71ba1b754161
SHA1
238a63666a95fce0b05185a79d37024e0482a9c6
SHA256
8133dc11530ee21b2d65e324cf865c9b30195f36c123f32ecfc334a11732097a
SHA512
3f703ed5661a24c1aad5f82f2c204851e8b4245c7a8f5218fa87e02d0a87175005e8720fb25f5a5da3f54e1a57f87ffea41622f9dc77a81642d0c81d694579a2
SSDEEP
6144:S5CTd8zH8YQhbnGoYVMw4kNKKLh7V2QkWJcBxwK/YoB:HdCH9Sb7w4kNKKLh7KCcBekYY
Checks for missing Authenticode signature.
resource |
---|
854c1c4d03f603b75eeb71ba1b754161_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
WideCharToMultiByte
FreeEnvironmentStringsW
SMapLS_IP_EBP_8
SUnMapLS_IP_EBP_8
SMapLS_IP_EBP_24
SUnMapLS_IP_EBP_24
ThunkConnect32
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetSystemDirectoryA
FreeEnvironmentStringsA
GetStringTypeW
RtlUnwind
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetModuleFileNameA
WideCharToMultiByte
FreeEnvironmentStringsW
SMapLS_IP_EBP_8
SUnMapLS_IP_EBP_8
SMapLS_IP_EBP_24
SUnMapLS_IP_EBP_24
ThunkConnect32
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetSystemDirectoryA
FreeEnvironmentStringsA
GetStringTypeW
RtlUnwind
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
MessageBoxA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
?CallDiskAccessInt@@YAHEGGGPAEK@Z
?CallGetDOSMem@@YAHPAEJ@Z
?CallGetMCBRoot@@YAHXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE