AtShutDown
AtStartup
AtWinLogoff
AtWinLogon
callprot
Static task
static1
Behavioral task
behavioral1
Sample
bb1b7f74e919cc66043e101ca6c6c30c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bb1b7f74e919cc66043e101ca6c6c30c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bb1b7f74e919cc66043e101ca6c6c30c_JaffaCakes118
Size
220KB
MD5
bb1b7f74e919cc66043e101ca6c6c30c
SHA1
45739e0a77018d6f89160c1e70eb0b0b3362a757
SHA256
cf4b216da4af91679a8280595108dc962d8f197c0e634c8abbc57ad3d3dfb52b
SHA512
700dc9c39195bb6a7be33e78bb73034d121b6f6d09ec88bd902792d9b14e5532720153a47582b1fd5faeb45f38fff080ebfe26d1cd99f4f0121d9efb1ccbb3bf
SSDEEP
3072:QKfhGKHkHFifZoYaQ73a2Lw+yOyI2JVl74suSSjbFQW5QQQcJCujDmo29F74ldZO:QKeHRfOyI2JUsutjKchJCCKD34ZDmT
Checks for missing Authenticode signature.
resource |
---|
bb1b7f74e919cc66043e101ca6c6c30c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetWindowsDirectoryA
SetLastError
CreateProcessA
GetCurrentThreadId
CloseHandle
DeleteFileA
GetModuleFileNameA
CreateEventA
CreateMutexA
GetLocalTime
GetLastError
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
TerminateProcess
GetCurrentProcess
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedDecrement
InterlockedIncrement
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
RegOpenKeyA
RegQueryValueExA
RegCloseKey
PathFileExistsA
AtShutDown
AtStartup
AtWinLogoff
AtWinLogon
callprot
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ