HrSetupRegistryAdd
RegistryAdd
RegistryDelete
Static task
static1
Behavioral task
behavioral1
Sample
8a553a58d61dc04fe7228ec8baa2a75e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8a553a58d61dc04fe7228ec8baa2a75e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8a553a58d61dc04fe7228ec8baa2a75e_JaffaCakes118
Size
203KB
MD5
8a553a58d61dc04fe7228ec8baa2a75e
SHA1
f4f27e44c1869d2fd535730a27ca477c83e52fd8
SHA256
9289535c4a367eef0b06761a391a8883bdf639e2d67fa1b53f80fe7000506050
SHA512
be87e97713b34ad80bb19eb8d9108c151a43e97aa1d4ca6bdcbb81f270e459a20be8edd0a3746f310da51d8afe8172ed8124d8fa05849b0b06baddbc921f6b79
SSDEEP
6144:eW/Wo4e410rb6v8bR7rIjzjoAp5ZtU94ouUSgo/Alt/HNYH:d/WTeVjNsz5E94ojwu/6
Checks for missing Authenticode signature.
resource |
---|
8a553a58d61dc04fe7228ec8baa2a75e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetLastError
lstrcmpA
SetFilePointer
WideCharToMultiByte
ReadFile
GetShortPathNameA
GetLastError
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
CreateFileA
CloseHandle
DeleteCriticalSection
TlsGetValue
TlsFree
SetStdHandle
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
InitializeCriticalSection
lstrlenA
EnterCriticalSection
LeaveCriticalSection
ExitProcess
LCMapStringA
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
LoadLibraryA
FlushFileBuffers
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
HeapFree
HeapAlloc
CharNextA
CharLowerA
CharUpperBuffA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegSetValueExA
RegSetValueA
RegCreateKeyExA
HrSetupRegistryAdd
RegistryAdd
RegistryDelete
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ