CheckDOM
CheckPOST
IAlloc
WantPOST
Static task
static1
Behavioral task
behavioral1
Sample
895974a2aff09998d72d414a58b3dca8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
895974a2aff09998d72d414a58b3dca8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
895974a2aff09998d72d414a58b3dca8_JaffaCakes118
Size
356KB
MD5
895974a2aff09998d72d414a58b3dca8
SHA1
063feacd253eeed17fc83746565c768a39d9d6c9
SHA256
dedd3675af02efa593f02f9673f210438acee5e6ccb124f0e288e4b53662e2b3
SHA512
1ee467e73294c6c95a7396b6718d98de7c3d7b03f58fb492150ac039c843e8323ae122706c39fc5305f9afaaceb3fe5810386c267ca4bdd97506229ab92dfd39
SSDEEP
6144:7H2rXHmzALYeLWTBlcddKMg4OWHhQTBJEjIcBFv:ZlcLgTYhQTrWDv
Checks for missing Authenticode signature.
resource |
---|
895974a2aff09998d72d414a58b3dca8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
RtlUnwind
GetLocaleInfoA
GetFileType
VirtualProtect
GetTickCount
CloseHandle
SetFilePointer
ReadFile
Sleep
CreateFileA
WriteFile
MultiByteToWideChar
GetFileSize
GetLastError
OutputDebugStringA
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
lstrlenA
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
GetProcAddress
FreeLibrary
LoadLibraryA
LockResource
LoadResource
SizeofResource
FindResourceA
HeapAlloc
HeapFree
InitializeCriticalSection
HeapCreate
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
DeleteCriticalSection
GetTimeZoneInformation
GetACP
TerminateProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
VirtualAlloc
RaiseException
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeFormatA
GetDateFormatA
HeapSize
HeapReAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCPInfo
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetStdHandle
GetStartupInfoA
VirtualFree
LoadStringA
IsWindow
CoInitialize
CoUninitialize
CoCreateInstance
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
SysFreeString
SysAllocString
VariantInit
CheckDOM
CheckPOST
IAlloc
WantPOST
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ