MekeScript1
MekeScript2
MekeScript3
MekeScript4
MekeScript5
MekeScript6
MekeScript7
MekeScript8
ServerSetup
Static task
static1
Behavioral task
behavioral1
Sample
b0bea3ce38fe14d7e2646b5df0daeb53_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b0bea3ce38fe14d7e2646b5df0daeb53_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b0bea3ce38fe14d7e2646b5df0daeb53_JaffaCakes118
Size
76KB
MD5
b0bea3ce38fe14d7e2646b5df0daeb53
SHA1
c68a47c616eb0dbb6400aa656afc9cb33e2b809e
SHA256
ca9932491344cd59cd8f486d817cb62e2f654548670b39213556bbf5164c4638
SHA512
1c5ac786b76487c98303d7edd1a1778cc8623a2bdb637805b29f4f0fc09d46a04db62e1289492e2b4a50d85310a179e1ff4088fef0d5b8a28c5f3f0dc0ea6317
SSDEEP
1536:XIFk0eJ3R1JoqvTyhv/nHqCqb7rxoBio7QlqEajiMHbLQ:XIFk0ehr+KTnrxoxklTciMHb
Checks for missing Authenticode signature.
resource |
---|
b0bea3ce38fe14d7e2646b5df0daeb53_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
WaitForSingleObject
GetLastError
GetVersion
MultiByteToWideChar
SetEnvironmentVariableA
CompareStringW
CompareStringA
ReleaseMutex
CreateMutexA
OpenMutexA
GetFileAttributesA
CreateFileA
WriteFile
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
CloseHandle
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RaiseException
GetCommandLineA
HeapAlloc
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
LCMapStringA
LCMapStringW
FlushFileBuffers
wsprintfA
StgCreateDocfile
StgOpenStorage
ControlService
StartServiceA
OpenServiceA
DeleteService
CreateServiceA
CloseServiceHandle
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerA
MekeScript1
MekeScript2
MekeScript3
MekeScript4
MekeScript5
MekeScript6
MekeScript7
MekeScript8
ServerSetup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ