CheckDOM
CheckPOST
IAlloc
WantPOST
Static task
static1
Behavioral task
behavioral1
Sample
a3071f460b640d7646882aa4fc3a5bf1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a3071f460b640d7646882aa4fc3a5bf1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a3071f460b640d7646882aa4fc3a5bf1_JaffaCakes118
Size
368KB
MD5
a3071f460b640d7646882aa4fc3a5bf1
SHA1
c19d0bcd47d000d09d29e281b77d6ee668014295
SHA256
4f7bd3a7fa628b82ceae7495e11eea333cdafc2ae00ada3a8a9f02e8336b4477
SHA512
020c875fe96e39aa058384a9a603bae5f2783570114a4e1e670ceca682fc56a4b0551f79f5450e7b2f91884dbbbd78d7cbfe727c9fac0998275e8a4c78b902fc
SSDEEP
6144:LElN7LFcS8dOaZNMPOd9H7QTBJVw1QGtJDf:SgOa9d9H7QTrO5t
Checks for missing Authenticode signature.
resource |
---|
a3071f460b640d7646882aa4fc3a5bf1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
RaiseException
GetLocaleInfoA
VirtualProtect
GetTickCount
CloseHandle
SetFilePointer
ReadFile
Sleep
CreateFileA
WriteFile
MultiByteToWideChar
GetFileSize
GetLastError
OutputDebugStringA
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
lstrlenA
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
GetProcAddress
FreeLibrary
LoadLibraryA
LockResource
LoadResource
SizeofResource
FindResourceA
HeapAlloc
HeapFree
InitializeCriticalSection
HeapCreate
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
DeleteCriticalSection
GetTimeZoneInformation
GetACP
TerminateProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
RtlUnwind
VirtualAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeFormatA
GetDateFormatA
HeapSize
HeapReAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCPInfo
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
VirtualFree
LoadStringA
IsWindow
CoInitialize
CoUninitialize
CoCreateInstance
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
VariantInit
SysAllocString
SysFreeString
CheckDOM
CheckPOST
IAlloc
WantPOST
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ