SisCSFilesToBackupForLink
SisCreateBackupStructure
SisCreateRestoreStructure
SisFreeAllocatedMemory
SisFreeBackupStructure
SisFreeRestoreStructure
SisRestoredCommonStoreFile
SisRestoredLink
Static task
static1
Behavioral task
behavioral1
Sample
ad9b0136237904529f7ad74490d42953_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ad9b0136237904529f7ad74490d42953_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ad9b0136237904529f7ad74490d42953_JaffaCakes118
Size
157KB
MD5
ad9b0136237904529f7ad74490d42953
SHA1
7d640ddb442ac1f4bd7f06fb3d7a5b9faba29f2b
SHA256
04d0e3de3d8f12d025af585a321158cf940d97f04576e45b813836db35fdf895
SHA512
e03c7deb73c7cbf2815b04474130c24b1b916e084c80d2a3a19b42ad95a49fa5fb918805ccb7bc4abb75b7c8e048b2261ff4508ffb958d5a34ab852127a32a8c
SSDEEP
3072:GaTjk917dIl+U1CqEY0NoaohQ2sNzGuwONa/U+VldNwheNGgh3nusev6qX:GaTS17dIMU1pEOa2QnNiANQU+VloheME
Checks for missing Authenticode signature.
resource |
---|
ad9b0136237904529f7ad74490d42953_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??2@YAPAXI@Z
wcscat
wcscpy
malloc
_except_handler3
?terminate@@YAXXZ
__CxxFrameHandler
free
??3@YAXPAX@Z
wcsrchr
memmove
wcslen
NtQueryInformationFile
RtlNtStatusToDosError
NtSetInformationFile
RpcStringFreeW
UuidToStringW
UuidFromStringW
ReadFile
SetEndOfFile
GetFileAttributesW
SetFileAttributesW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetDiskFreeSpaceW
InitializeCriticalSection
SetFilePointer
WriteFile
CreateFileW
DeviceIoControl
CloseHandle
GetLastError
SisCSFilesToBackupForLink
SisCreateBackupStructure
SisCreateRestoreStructure
SisFreeAllocatedMemory
SisFreeBackupStructure
SisFreeRestoreStructure
SisRestoredCommonStoreFile
SisRestoredLink
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ