install
load
Static task
static1
Behavioral task
behavioral1
Sample
8ab8555952c9e683140748717c201a1d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ab8555952c9e683140748717c201a1d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8ab8555952c9e683140748717c201a1d_JaffaCakes118
Size
100KB
MD5
8ab8555952c9e683140748717c201a1d
SHA1
531edb90c56b4222c644c1d528153660a15ff32a
SHA256
e9961f975cdb193a6e9c9e3b402310538b545c2950091d9621657f65cc3c54e1
SHA512
2f29d7ba1ce96610c21b9164c6fa26d84c7b34f3d68ee6a9143cd64b1e14ea4ccedd4cef294ef4dac3ae4160fcb79e822bc111a6ffbaacd1208315db82e27871
SSDEEP
768:XOJHKpzNyDPi/RiNG3JiVKMfX3CGXCFNIY5JCtlYl/ZU9QZU9hFnN8Q:XOJHKJgERiNQKKMzyStl8zqFnNn
Checks for missing Authenticode signature.
resource |
---|
8ab8555952c9e683140748717c201a1d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
GetVersionExA
GetLongPathNameA
GetTempPathA
GetTempFileNameA
CloseHandle
TerminateProcess
WaitForSingleObject
DeleteFileA
lstrcpynA
CreateThread
GetModuleFileNameA
GetLocaleInfoA
VirtualProtect
FlushFileBuffers
SetStdHandle
VirtualQuery
InterlockedExchange
RtlUnwind
LoadLibraryA
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
UnhandledExceptionFilter
GetEnvironmentStringsW
GetSystemInfo
SetEndOfFile
ReadFile
CreateFileA
GetOEMCP
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapAlloc
HeapFree
ExitProcess
GetCommandLineA
GetACP
HeapSize
GetCPInfo
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLastError
WriteFile
GetProcAddress
GetModuleHandleA
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CreateWindowExA
LoadCursorA
RegisterClassExA
DefWindowProcA
SetTimer
BeginPaint
EndPaint
PostQuitMessage
KillTimer
LoadIconA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegOpenKeyA
ShellExecuteExA
Shell_NotifyIconA
ShellExecuteA
install
load
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ