GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueIndexA
VerQueryValueIndexW
VerQueryValueW
Static task
static1
Behavioral task
behavioral1
Sample
ba9fc846131b63915aaa2674299fae29_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ba9fc846131b63915aaa2674299fae29_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ba9fc846131b63915aaa2674299fae29_JaffaCakes118
Size
104KB
MD5
ba9fc846131b63915aaa2674299fae29
SHA1
1fe398e83156ec619acc41b19c771a84e359a504
SHA256
c4f8eaa18e95b8cb8f84e2833f96795d5178187bd5fe6eec0cb453cd1d8db2b8
SHA512
4d486f9a3bf9d1df6b77ff8220aca50955bf4d7fe51eadd88f2fd565702f358e1441a2e45c9bbf4c149781ea01207695e9c3f73a8ebddbcdfb4b8444eaeddf9b
SSDEEP
3072:FmKXyPCJi1DrizUwpWteJc8xuTz9P+ZA81:FJCsEDrMDpsPq1
Checks for missing Authenticode signature.
resource |
---|
ba9fc846131b63915aaa2674299fae29_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RtlUnwind
RtlFreeUnicodeString
NtLoadDriver
RtlAnsiStringToUnicodeString
RtlInitAnsiString
NtClose
NtSetSecurityObject
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
NtOpenKey
RtlInitUnicodeString
GetCommandLineA
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InterlockedExchange
CloseHandle
GetSystemDirectoryA
CopyFileA
CreateMutexA
CreateFileMappingA
MultiByteToWideChar
MapViewOfFile
WideCharToMultiByte
ReleaseMutex
UnmapViewOfFile
LoadResource
DisableThreadLibraryCalls
LockResource
SizeofResource
CreateThread
GetProcAddress
FindResourceA
LoadLibraryA
FreeLibrary
CreateFileA
GetFileSize
ReadFile
GetLastError
WaitForSingleObject
FreeResource
GetModuleHandleA
Sleep
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
VirtualAlloc
GetSystemTimeAsFileTime
HeapReAlloc
HeapAlloc
HeapFree
GetCurrentThreadId
GetThreadLocale
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
HeapSize
WriteFile
GetStdHandle
GetModuleFileNameA
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSection
RaiseException
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueIndexA
VerQueryValueIndexW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ