DumpBox
DumpHashes
DumpLsa
Static task
static1
Behavioral task
behavioral1
Sample
94d8bb08a7c9b55931bda705d4acf95c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
94d8bb08a7c9b55931bda705d4acf95c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
94d8bb08a7c9b55931bda705d4acf95c_JaffaCakes118
Size
3.3MB
MD5
94d8bb08a7c9b55931bda705d4acf95c
SHA1
34bb0c97308bab3531c2062c1ee9b04cb9732fda
SHA256
d3c69e8f9a73895fbbc48dd75091a6a8774b40337ecf9524f3c8f151017060a6
SHA512
1dea41a013b28d649f9bf105d4820ad31e03950c03f1dd53213ff688cd12a888c1170b5419e5ac3dc73e2fe8a8fc42cb3a04cb0b30756f94f6179ad562bfd552
SSDEEP
24576:sLCOwYlBOTlJuuhgxlKhpak1Zic2AHM6KEgZC/NJBB3oio+KMIf+LZk0:sO3YlBOxJujlKhpakic2AHFKEh/NJrj
Checks for missing Authenticode signature.
resource |
---|
94d8bb08a7c9b55931bda705d4acf95c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
WideCharToMultiByte
FreeLibrary
InterlockedDecrement
InterlockedIncrement
GetLastError
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
HeapFree
CloseHandle
InitializeCriticalSection
WriteFile
DeleteCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
FlushFileBuffers
CreateFileA
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
ReadFile
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetParent
GetWindowTextA
SendMessageA
LsaQueryInformationPolicy
LsaClose
RegOpenKeyExA
RegEnumKeyW
LsaFreeMemory
RegCloseKey
LsaOpenPolicy
DumpBox
DumpHashes
DumpLsa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ