FME_apiVersion
FME_createFunction
FME_destroyFunction
Static task
static1
Behavioral task
behavioral1
Sample
b8d3755a510dccaa09e952a7cc98c027_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b8d3755a510dccaa09e952a7cc98c027_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b8d3755a510dccaa09e952a7cc98c027_JaffaCakes118
Size
368KB
MD5
b8d3755a510dccaa09e952a7cc98c027
SHA1
b7a2e6c38ad83c6e2c4b8787fa0cb445557e335a
SHA256
8bce99094c8a6bd9b197c4e1237238f91d5cf3019f767295e7f18ba8d9a7ee98
SHA512
09478c56e64e06c18cdf5452fdfe55b1b656a0eeb57dcd7a3101534953209dd9f31ae96a4f9fc070ce8ddcda3339efbc85030b3edff47e547e62f246331f3c66
SSDEEP
6144:PfTjQnXcya6zXcWnrinRYmHu6TRwtjUFUBum9zEyt2Qj8wIXbqF:BVRQoF7mF2OJEbqF
Checks for missing Authenticode signature.
resource |
---|
b8d3755a510dccaa09e952a7cc98c027_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LeaveCriticalSection
EnterCriticalSection
TlsGetValue
HeapAlloc
GetProcessHeap
HeapFree
VirtualQuery
VirtualLock
VirtualAlloc
VirtualFree
GetSystemInfo
IsBadCodePtr
VirtualQueryEx
GetCurrentProcessId
WaitForSingleObject
CreateMutexA
GetCurrentThreadId
CloseHandle
ReleaseMutex
InitializeCriticalSection
DeleteCriticalSection
CreateEventA
SetEvent
TlsAlloc
TlsSetValue
Sleep
GetVersion
UnmapViewOfFile
OpenProcess
GetCurrentProcess
GetLastError
OpenMutexA
MapViewOfFileEx
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
GetProcAddress
GetModuleHandleA
InterlockedExchange
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetLocaleInfoW
GetACP
WideCharToMultiByte
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
RtlUnwind
GetCommandLineA
GetVersionExA
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetCPInfo
ExitProcess
GetFileType
LCMapStringA
LCMapStringW
WriteFile
GetStdHandle
GetModuleFileNameA
TlsFree
SetLastError
GetOEMCP
IsValidCodePage
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
LoadLibraryA
SetStdHandle
MessageBeep
MessageBoxA
FME_createSession
FME_destroySession
FME_apiVersion
FME_createFunction
FME_destroyFunction
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ