WLEntry
WLEntryPoint
WLEventLogoff
WLEventLogon
WLEventShutdown
Static task
static1
Behavioral task
behavioral1
Sample
a346167ad3881db5cd777ba9c1b07da7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a346167ad3881db5cd777ba9c1b07da7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a346167ad3881db5cd777ba9c1b07da7_JaffaCakes118
Size
110KB
MD5
a346167ad3881db5cd777ba9c1b07da7
SHA1
fe0256bcc716d73112e3c41ec994ff2623466500
SHA256
c82a5ad0ade83b82eda1f31e6c0104c9ef8e062103d210fbd1ba71b812565536
SHA512
ece5877b19530b9b45c48163bb7c9eeaa53ee2242ba60cc1741a100fe96a26ce0081b16f59c8003403a0f6f41b21a6fa90d610a6e60c1296ed60b67d5cf0877c
SSDEEP
1536:9MaNMsjeLBSMwgrfP3yEEYp0UZwio43IRnQNQ/j/LY79BPfQDzoMKWUiT0yS:CtwWPy40UR3gnaEjAWoXWUiAX
Checks for missing Authenticode signature.
resource |
---|
a346167ad3881db5cd777ba9c1b07da7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpynW
lstrlenW
CreateEventA
SetEvent
lstrcpyA
SystemTimeToFileTime
GetSystemTime
IsBadReadPtr
lstrcatA
Sleep
GetLastError
MoveFileA
DeleteFileA
GetTempFileNameA
TerminateThread
GetCurrentThread
CreateMutexW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
CreateSemaphoreA
FindNextFileA
FindFirstFileA
GetVolumeInformationA
GetDriveTypeA
GetLogicalDrives
GetComputerNameA
LoadLibraryA
SetUnhandledExceptionFilter
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
FindClose
GetEnvironmentVariableA
LocalFree
LocalAlloc
DeleteCriticalSection
GlobalFree
GlobalUnlock
lstrlenA
GlobalAlloc
GetFileTime
GetFullPathNameA
GetTempPathA
FileTimeToSystemTime
GetTimeZoneInformation
GetLocalTime
GetTickCount
QueryPerformanceCounter
GetProcAddress
GetModuleHandleA
ExitThread
GetModuleFileNameA
GetCurrentThreadId
WinExec
ReleaseSemaphore
ResumeThread
SetThreadContext
GetThreadContext
VirtualAllocEx
FreeLibrary
GetVersion
MoveFileExA
CopyFileA
GetExitCodeProcess
SetFilePointer
CreateDirectoryA
RemoveDirectoryA
DisableThreadLibraryCalls
CreateMutexA
ReleaseMutex
ExitProcess
lstrcpynA
CreatePipe
GetStartupInfoA
GetSystemDirectoryA
OutputDebugStringA
CreateProcessA
WaitForSingleObject
PeekNamedPipe
ReadFile
TerminateProcess
lstrcmpiA
VirtualProtect
GetCurrentProcess
WriteProcessMemory
GetFileAttributesA
GetSystemTimeAsFileTime
VirtualQuery
VirtualFree
VirtualAlloc
CreateFileA
WriteFile
CreateThread
CloseHandle
GlobalLock
MessageBoxA
wsprintfA
wvsprintfA
GetSystemMetrics
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumValueA
RegDeleteValueA
RegNotifyChangeKeyValue
RegCreateKeyExA
RegSetValueExA
OpenProcessToken
ImpersonateLoggedOnUser
RevertToSelf
GetTokenInformation
LookupAccountSidA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueExA
RegCloseKey
CreateStreamOnHGlobal
RtlUnwind
memmove
strchr
tolower
_alldiv
_strcmpi
_chkstk
_allmul
NtAllocateVirtualMemory
NtQuerySystemInformation
NtFreeVirtualMemory
NtOpenProcess
NtClose
_strlwr
_strnicmp
strstr
inet_addr
recv
getsockname
connect
socket
bind
WSASetLastError
select
WSAGetLastError
gethostbyname
inet_ntoa
WSAStartup
gethostbyaddr
__WSAFDIsSet
accept
gethostname
ioctlsocket
shutdown
closesocket
sendto
ntohs
setsockopt
recvfrom
htonl
ntohl
htons
listen
send
DnsQuery_A
DnsRecordListFree
ord19
ord11
ord21
ord23
ord140
ord129
ord17
ord75
ord13
ord135
ord138
InternetCloseHandle
InternetOpenUrlA
InternetReadFile
InternetOpenA
StrStrA
StrChrA
StrCmpNA
StrToIntA
WLEntry
WLEntryPoint
WLEventLogoff
WLEventLogon
WLEventShutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ