DeviceIoCtl
DeviceIoCtlByHandle
GetDeviceID
GetUSBControlPortName
Static task
static1
Behavioral task
behavioral1
Sample
aa0ecbc484369e6e4a10a21dcc79f25b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
aa0ecbc484369e6e4a10a21dcc79f25b_JaffaCakes118
Size
144KB
MD5
aa0ecbc484369e6e4a10a21dcc79f25b
SHA1
940595e2ab6ecfcf3748e3d66e6684638abc33e9
SHA256
4070f51e35a33de6cf038977ba52ea4dec2e90cc2e2b68b2f039844480420130
SHA512
b854dd739498849a6f2cdaab85818d568ea4057ba1b903fd464cb04a6c89773f2b5ee1b065a2eb2f0a37762259b566190f32d9e41de88a2b662c619757db6350
SSDEEP
3072:6x+6El0zDRluZdYRH5KfdtUeo1UIjJmCksfZhjFy1b:6x+6ElQmHYGzU/rEKfz
Checks for missing Authenticode signature.
resource |
---|
aa0ecbc484369e6e4a10a21dcc79f25b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateFileA
lstrcpyA
DeviceIoControl
OutputDebugStringA
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
wsprintfA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
DeviceIoCtl
DeviceIoCtlByHandle
GetDeviceID
GetUSBControlPortName
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ