AddRegistry
Download
Static task
static1
Behavioral task
behavioral1
Sample
ac6ad1d5b05e5739335a8cfaef08909e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ac6ad1d5b05e5739335a8cfaef08909e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ac6ad1d5b05e5739335a8cfaef08909e_JaffaCakes118
Size
48KB
MD5
ac6ad1d5b05e5739335a8cfaef08909e
SHA1
dfcaca52d7f62aaea2b3a36fa447126daf4d2583
SHA256
152cb8f27225797e36d76f05fe6838630dda8860649a21026e6e0b3d7e4048b0
SHA512
3e1fa95fae0a5bedf514806a0eeb0e6bad4449a306c9eeaeaa957c46030bd8cfb7800e627d47b2d2b695d0e69977122ce4e93d7f468bbfd91b2ad2e79cd6daed
SSDEEP
768:D5QFXbmFWP8vtScqoHUgqjpRbRX11Jkh7k1SPCApy5JP3m:ttW2GP/R1l1J7SPCAg5xW
Checks for missing Authenticode signature.
resource |
---|
ac6ad1d5b05e5739335a8cfaef08909e_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateWaitableTimerW
WaitForSingleObject
SetWaitableTimer
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
RaiseException
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
CoInitializeSecurity
CoCreateInstance
CoInitializeEx
AddRegistry
Download
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ