CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
Static task
static1
Behavioral task
behavioral1
Sample
b273fa97431153c131b5b9ae8d6f85b7_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b273fa97431153c131b5b9ae8d6f85b7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b273fa97431153c131b5b9ae8d6f85b7_JaffaCakes118
Size
1.2MB
MD5
b273fa97431153c131b5b9ae8d6f85b7
SHA1
6747bd7ef216cdf6d23e500c2ca8c41e851b109e
SHA256
f487a0f3b8ef34854390d1f67b57ead543c6a940a74bf00699264c183533cbe6
SHA512
6bc9e750e65ae49fa76d6fc1447b3386c79cf434871e75a5b6f2307ccd35b9105c8b6e5eafd610e618ce36ac4089cecd2c739ed05cb9bf9944327b40fcbc2e1c
SSDEEP
24576:GuYfg4LhHr4NFXKJO1aUiDBvZ2+ITHmpclO9N:m9cKrUqZWLAcU
Checks for missing Authenticode signature.
resource |
---|
b273fa97431153c131b5b9ae8d6f85b7_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetSystemPaletteEntries
GetWindowExtEx
DeleteEnhMetaFile
GetCharWidthW
GetCharWidth32A
GetViewportOrgEx
GetTextExtentExPointI
DeregisterEventSource
GetSecurityDescriptorSacl
LookupAccountSidA
DecryptFileW
VirtualAlloc
GetCommProperties
FillConsoleOutputCharacterA
GetCurrentThread
ConvertDefaultLocale
FreeResource
GetThreadTimes
GetEnvironmentStringsW
GetThreadId
GlobalDeleteAtom
DeleteTimerQueueTimer
GetPrivateProfileStringW
GetNLSVersion
GetLastError
LoadLibraryA
lstrcmpiW
DebugActiveProcess
InsertMenuW
DrawTextW
DrawStateW
DrawIconEx
GetFileTitleW
CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ