Entry
InstallM
InstallS
Static task
static1
Behavioral task
behavioral1
Sample
8940b9b7e6d0d669c7a9d3082016354e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8940b9b7e6d0d669c7a9d3082016354e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8940b9b7e6d0d669c7a9d3082016354e_JaffaCakes118
Size
116KB
MD5
8940b9b7e6d0d669c7a9d3082016354e
SHA1
25151784488494d206d69b50582758aae2e9a03a
SHA256
aa556f2a3c5cfad4b7b944c6774281bc8d9dff2eeca497bb9d57131d15832948
SHA512
6601443ee5306f11c0ab1f1861c9602647771b6c33860308431d9fbe6bc204d7ea3f93ed28071f249bce58c33475149aef8143c25ce10491fda13eac38ea7bb8
SSDEEP
1536:C16uwb1/D1QQCmtfbuIZ6c4VJhTpmu3EfFxaQigyOlgt+Zez4zqe:C18fbuIcmuwDtjyOlgt+Mz4zqe
Checks for missing Authenticode signature.
resource |
---|
8940b9b7e6d0d669c7a9d3082016354e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
lstrcmpA
SetLastError
GetTempFileNameA
GetTempPathA
SetFileAttributesA
lstrlenA
WriteFile
SetFilePointer
ReadFile
CopyFileA
GetPrivateProfileStringA
FindClose
FindNextFileA
FindFirstFileA
CreateProcessA
OpenEventA
GetVolumeInformationA
GetDriveTypeA
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
Sleep
ExitProcess
WaitForSingleObject
ResumeThread
TerminateProcess
DeleteFileA
GetEnvironmentVariableA
GetModuleHandleA
GetFileTime
GetSystemTime
SetFileTime
GetTempPathW
GetWindowsDirectoryW
GetEnvironmentVariableW
GetComputerNameW
GetTimeZoneInformation
GetLocalTime
MultiByteToWideChar
lstrcatW
lstrlenW
GetVersionExA
GetWindowsDirectoryA
CreateDirectoryA
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
lstrcpyA
CreateFileA
GetFileInformationByHandle
CloseHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetFileAttributesA
LoadLibraryExA
IsBadCodePtr
IsBadReadPtr
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
WideCharToMultiByte
HeapSize
SetUnhandledExceptionFilter
FlushFileBuffers
GetCurrentProcess
GetStartupInfoA
GetStdHandle
HeapAlloc
HeapFree
GetFileType
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
TlsAlloc
TlsFree
SetStdHandle
SetEndOfFile
SetHandleCount
RegisterClassExA
CreateWindowExA
DefWindowProcA
CharLowerBuffA
wsprintfA
wsprintfW
GetMessageA
TranslateMessage
DispatchMessageA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegCloseKey
UuidToStringA
UuidCreate
RpcStringFreeA
inet_ntoa
gethostbyname
WSAStartup
WSACleanup
Entry
InstallM
InstallS
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ