Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion
Static task
static1
Behavioral task
behavioral1
Sample
8bfa7dac0db95bff53ed00607d252048_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8bfa7dac0db95bff53ed00607d252048_JaffaCakes118
Size
160KB
MD5
8bfa7dac0db95bff53ed00607d252048
SHA1
7f293422e023b0c559a008b009749328e90e20b8
SHA256
7cc3c40db1603fbbc15ba414ec7cb21071a56348079bd05a1c9a2bbe71f95a51
SHA512
1ba3cdd7eb8f395377a3e5389c0f535b18d3abb0fbbb1a897e8e78ebee3787f7b8c3933c87b20dfd2a5803ca863fb0daf460518133b4b97f6d8a940df2742c96
SSDEEP
3072:oBscVwjwtFbk0FEXcEJORDxlQ9dPeBxqEcrc5:o7FtFbkWAcuyDDiPeWEcrc5
Checks for missing Authenticode signature.
resource |
---|
8bfa7dac0db95bff53ed00607d252048_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_DLL
SetupOpenInfFileW
SetupOpenFileQueue
SetupInstallFilesFromInfSectionW
SetupInitDefaultQueueCallback
SetupCloseInfFile
SetupDefaultQueueCallbackA
SetupCommitFileQueueA
SetupTermDefaultQueueCallback
SetupCloseFileQueue
SetupInstallServicesFromInfSectionW
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualProtect
SetLastError
lstrlenW
LocalFree
WritePrivateProfileStringA
lstrcatA
GetWindowsDirectoryA
GetLastError
lstrcpyW
LocalAlloc
lstrcatW
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
wsprintfA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE