GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueIndexA
VerQueryValueIndexW
VerQueryValueW
Static task
static1
Behavioral task
behavioral1
Sample
ac994efdfe505d4917bcaed2f775111b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ac994efdfe505d4917bcaed2f775111b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ac994efdfe505d4917bcaed2f775111b_JaffaCakes118
Size
104KB
MD5
ac994efdfe505d4917bcaed2f775111b
SHA1
5abca19d7b2e62c474e8dc22420d75ad252cdbd7
SHA256
9b3ff8003f73e16e8e447279e5b7da863497d0ecced26cf8a0878fb6508f9aac
SHA512
a7fb21eb353767a8d5ffd5b79418ba5aa307dee6be7034d6cfcc543722abd86c878a904e3276eff90b5fb63272c06c22017ba2a04aec8eb8fdbf7c9b1c4998db
SSDEEP
3072:TmKXyPCJi1DrizUwpWteJc8xuTz9P+ZA88:TJCsEDrMDpsPq8
Checks for missing Authenticode signature.
resource |
---|
ac994efdfe505d4917bcaed2f775111b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RtlUnwind
RtlFreeUnicodeString
NtLoadDriver
RtlAnsiStringToUnicodeString
RtlInitAnsiString
NtClose
NtSetSecurityObject
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
NtOpenKey
RtlInitUnicodeString
GetCommandLineA
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InterlockedExchange
CloseHandle
GetSystemDirectoryA
CopyFileA
CreateMutexA
CreateFileMappingA
MultiByteToWideChar
MapViewOfFile
WideCharToMultiByte
ReleaseMutex
UnmapViewOfFile
LoadResource
DisableThreadLibraryCalls
LockResource
SizeofResource
CreateThread
GetProcAddress
FindResourceA
LoadLibraryA
FreeLibrary
CreateFileA
GetFileSize
ReadFile
GetLastError
WaitForSingleObject
FreeResource
GetModuleHandleA
Sleep
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
VirtualAlloc
GetSystemTimeAsFileTime
HeapReAlloc
HeapAlloc
HeapFree
GetCurrentThreadId
GetThreadLocale
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
HeapSize
WriteFile
GetStdHandle
GetModuleFileNameA
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSection
RaiseException
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueIndexA
VerQueryValueIndexW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ