DeinitServerExtension
GetExtensionName
InitServerExtension
ReflectiveLoader
Static task
static1
Behavioral task
behavioral1
Sample
b3d00110a7bd4693e2dd6ba5f5a59623_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b3d00110a7bd4693e2dd6ba5f5a59623_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b3d00110a7bd4693e2dd6ba5f5a59623_JaffaCakes118
Size
195KB
MD5
b3d00110a7bd4693e2dd6ba5f5a59623
SHA1
0493e2ceb57ff477276fea1ea817795fecc6dd97
SHA256
1a7cc8400302950f745ef5980d0047b1aacf52f9671d8b7f08d81b4765421738
SHA512
fc4a169a0ea384b683bb2d48420e08d286a891f895638711c6a2e612e97225c5f36b22b62ac211be95ac1c4a89f0a33256e15e6e85a89c64b605d7729e768913
SSDEEP
6144:oS4lggQ4BZrd6T0HTNNKjdJew9VTa4zwlL050bYpKcy:oHS2TNIjDn9YIwK
Checks for missing Authenticode signature.
resource |
---|
b3d00110a7bd4693e2dd6ba5f5a59623_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CreateFileW
CloseHandle
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
ReadFile
GetStringTypeW
LCMapStringW
GetVersionExA
LoadLibraryA
GetLastError
GetCurrentThreadId
LocalAlloc
GlobalFree
GetProcAddress
GlobalAlloc
SetFilePointerEx
FreeLibrary
HeapFree
HeapAlloc
GetCommandLineA
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
SetLastError
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
RtlUnwindEx
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FlushFileBuffers
GetConsoleCP
GetConsoleMode
OutputDebugStringW
HeapReAlloc
HeapSize
CompareStringW
ReadConsoleW
GetDesktopWindow
ReleaseDC
GetDC
GetSystemMetrics
GetProcessWindowStation
SetProcessWindowStation
CloseWindowStation
OpenWindowStationA
GetThreadDesktop
CloseDesktop
SetThreadDesktop
OpenInputDesktop
StretchBlt
SelectObject
GetDIBits
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
RevertToSelf
DeinitServerExtension
GetExtensionName
InitServerExtension
ReflectiveLoader
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ