SteamMatchmaking
SteamUser
Wiz_SingleEntryUnzip
Static task
static1
Behavioral task
behavioral1
Sample
b7cd9929d1fe6cbe7a56652290b3a172_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b7cd9929d1fe6cbe7a56652290b3a172_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b7cd9929d1fe6cbe7a56652290b3a172_JaffaCakes118
Size
152KB
MD5
b7cd9929d1fe6cbe7a56652290b3a172
SHA1
5d8dbfbcf371d7900c91a57aaab5b8c7855773d7
SHA256
98f54707e6300e03b28583e6c3176e846b1bec3b4f8080f9fc64b32ab3c4b7c6
SHA512
b793eb366446ba03de2242a74981406f7332920978f0b38bfecfbfce1ff0039f8a02568efda88a3143e9f4ffe019fac53444955d8b87dab962bc05608a0f9bfc
SSDEEP
3072:tXRv06AdVOZPUfkPPSXbe5f1ENsvcImdylBxBqJ39HxucNWJFofzm1sUQO3MArJK:ty90xHSXq5f1EOc0BxBqJ39HAcNWgfkz
Checks for missing Authenticode signature.
resource |
---|
b7cd9929d1fe6cbe7a56652290b3a172_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateMutexA
CreateThread
DeleteFileA
ExitProcess
GetCommandLineA
GetCurrentProcess
GetCurrentThread
GetFileSize
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapUnlock
InterlockedCompareExchange
InterlockedExchange
LoadLibraryA
LocalAlloc
LocalFree
LocalReAlloc
QueryPerformanceCounter
RaiseException
ReleaseMutex
RtlUnwind
SetThreadAffinityMask
SetTimerQueueTimer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
FindExecutableA
SHGetSettings
SHUpdateRecycleBinIcon
_errno
_except_handler3
_exit
_fsopen
_initterm
_ismbblead
_mbsicmp
_mbsnbicmp
_tempnam
_controlfp
exit
fclose
fwrite
memmove
memset
rename
sprintf
srand
wcslen
_chkesp
_cexit
_amsg_exit
__setusermatherr
__set_app_type
__p__fmode
__p__commode
__getmainargs
_unlink
_XcptFilter
SendMessageA
SendDlgItemMessageA
PostMessageA
MessageBoxA
GetDlgItem
EndDialog
EnableWindow
DdeConnect
UpdateWindow
SteamMatchmaking
SteamUser
Wiz_SingleEntryUnzip
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ