Entry
InstallM
Static task
static1
Behavioral task
behavioral1
Sample
af3f0efbd69905123f7df958cc88dff9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
af3f0efbd69905123f7df958cc88dff9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
af3f0efbd69905123f7df958cc88dff9_JaffaCakes118
Size
112KB
MD5
af3f0efbd69905123f7df958cc88dff9
SHA1
8e2a483ad87d3ba2725905647fce7521b6aa9594
SHA256
cb993d5b90d9a5bd569177ee60e71e3b4639019f46ddd2a9fb8e890565335f66
SHA512
c2b03a90a4d4cdae1f6e08d690e0376cb771510ca2616fbeb6bd7e66295f1fefc61d1d2de8000597ba1ed274cc916387dd058dc9fe45f76f0f632d75d5177edc
SSDEEP
1536:M67AnGMsW2ab+XYYP9NB6ExXUoRqCXTl0cFkZ0+Dib4EocPJaxaQN:1AOIb+Xd9P3zRt0cs0iE4EocPJasg
Checks for missing Authenticode signature.
resource |
---|
af3f0efbd69905123f7df958cc88dff9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
UnmapViewOfFile
GetLastError
MapViewOfFile
CreateFileMappingA
GetFileSize
lstrcmpA
SetLastError
GetTempFileNameA
GetTempPathA
SetFileAttributesA
lstrlenA
WriteFile
SetFilePointer
ReadFile
CopyFileA
GetPrivateProfileStringA
FindClose
FindNextFileA
FindFirstFileA
CreateProcessA
OpenEventA
GetVolumeInformationA
GetDriveTypeA
lstrcatA
GetSystemDirectoryA
ExitProcess
WaitForSingleObject
ResumeThread
TerminateProcess
LoadLibraryExA
DeleteFileA
GetModuleHandleA
GetModuleFileNameA
GetFileTime
GetSystemTime
Sleep
SetFileTime
MultiByteToWideChar
GetTempPathW
GetWindowsDirectoryW
GetEnvironmentVariableW
GetComputerNameW
GetTimeZoneInformation
GetLocalTime
lstrcatW
lstrlenW
GetVersionExA
lstrcmpiA
GetWindowsDirectoryA
GetComputerNameA
CreateDirectoryA
OutputDebugStringA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
lstrcpyA
CreateFileA
GetFileAttributesA
GetFileInformationByHandle
CloseHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetEnvironmentVariableA
IsBadCodePtr
IsBadReadPtr
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
HeapAlloc
HeapFree
GetFileType
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
InterlockedDecrement
InterlockedIncrement
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
TlsAlloc
TlsFree
SetStdHandle
SetEndOfFile
SetHandleCount
GetStdHandle
GetStartupInfoA
GetCurrentProcess
FlushFileBuffers
SetUnhandledExceptionFilter
HeapSize
WideCharToMultiByte
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
DefWindowProcA
wsprintfA
RegisterClassExA
CreateWindowExA
CharLowerBuffA
wsprintfW
GetMessageA
TranslateMessage
DispatchMessageA
FindWindowA
RegCreateKeyExA
GetUserNameA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegEnumValueA
RegCloseKey
UuidToStringA
UuidCreate
RpcStringFreeA
inet_ntoa
gethostbyname
WSAStartup
WSACleanup
Entry
InstallM
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ