NSGetModule
NSModule
Static task
static1
Behavioral task
behavioral1
Sample
a6a5f157b7b03ac0821b8ce55b033fc7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a6a5f157b7b03ac0821b8ce55b033fc7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a6a5f157b7b03ac0821b8ce55b033fc7_JaffaCakes118
Size
212KB
MD5
a6a5f157b7b03ac0821b8ce55b033fc7
SHA1
4c393b70e910ea117b0985a0be082e274fd81ad5
SHA256
2f4394d3eda7d52fe4f3dd03b6833cf00530c1f45e99b869e7e634a96e1b3bef
SHA512
5c253b5f22179e25e80a37cc5b0099b934ed314f500fbc515544ab15f0ea815d96986e76ff08c98a52c174e8657293e6495db30bf58e1beecac8e4b6e6f3c881
SSDEEP
3072:rx+fqc+hUT5dQhwF99pogRcPSlr+8rY8ckmE+dP4EdIFwhb5Yw5wAu+:VfzhUT5dQhw5qgRugr9Y55EWEw5
Checks for missing Authenticode signature.
resource |
---|
a6a5f157b7b03ac0821b8ce55b033fc7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NS_CStringContainerFinish
NS_CStringContainerInit
NS_GetServiceManager
NS_CStringContainerInit2
NS_StringSetData
moz_free
moz_xmalloc
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoA
SetEvent
ResetEvent
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCurrentProcessId
lstrcpynW
GetCurrentThreadId
WaitForMultipleObjects
GetVersionExW
GetProcAddress
LoadLibraryW
FreeLibrary
GetCurrentProcess
HeapAlloc
GetProcessHeap
FormatMessageW
InterlockedDecrement
CreateFileW
GetModuleFileNameW
ResumeThread
TerminateThread
Sleep
CreateThread
SetEndOfFile
SetFilePointer
FlushFileBuffers
ReadFile
WriteFile
EnterCriticalSection
LeaveCriticalSection
SetLastError
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
RaiseException
ReleaseSemaphore
CreateSemaphoreW
FindResourceExW
VirtualQuery
IsBadWritePtr
GetCurrentThread
OutputDebugStringW
GetTickCount
CreateEventW
SetHandleCount
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
HeapCreate
ExitProcess
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetCommandLineA
GetSystemTimeAsFileTime
RtlUnwind
VirtualAlloc
VirtualFree
LoadLibraryA
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleHandleA
GetLocaleInfoA
GetStringTypeW
FindResourceW
LoadResource
LockResource
SizeofResource
SetStdHandle
CreateFileA
GetFileType
GetStartupInfoA
LCMapStringA
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetStringTypeA
ReleaseMutex
WaitForSingleObject
CreateMutexW
CloseHandle
GetModuleHandleW
lstrlenW
lstrlenA
MultiByteToWideChar
GetLastError
WideCharToMultiByte
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
GetEnvironmentStrings
wsprintfW
UnregisterClassA
SetSecurityDescriptorSacl
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryInfoKeyW
SHCreateDirectoryExW
CLSIDFromProgID
CoInitialize
CoCreateGuid
StringFromCLSID
CoTaskMemFree
CoCreateInstance
CoUninitialize
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SysStringLen
VariantInit
VariantClear
VariantChangeType
SysFreeString
NSGetModule
NSModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ