GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueIndexA
VerQueryValueIndexW
VerQueryValueW
Static task
static1
Behavioral task
behavioral1
Sample
bbc17b4a9df94c541dd701748058218b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bbc17b4a9df94c541dd701748058218b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bbc17b4a9df94c541dd701748058218b_JaffaCakes118
Size
18KB
MD5
bbc17b4a9df94c541dd701748058218b
SHA1
3b55b0237ee871dc909387361768e6ded23d0a9d
SHA256
1c39aa2571ec279039c43ba93aaa7d9738d150010a01cb913d6f027e3280145e
SHA512
4da9a5b6f3f385e9091639417e1752429f6727a5b3f4beaa01cc043f013d0ccbe51daa412c4cfd636d8280933ed0ce1c4a94d7396f50d6e5ab2f9a0bf5818be5
SSDEEP
384:qd41mcxTFS6dDMNyI9Xm3a7xC+PFqA3OaKgTDiG8BljPW8iwLWPJp:tmcxT/gF923aMUltT5iBFiw2
Checks for missing Authenticode signature.
resource |
---|
bbc17b4a9df94c541dd701748058218b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetLastError
SetFileTime
GetFileTime
TlsGetValue
_lcreat
lstrcmpiA
GetFullPathNameA
lstrcpyA
_lclose
LocalAlloc
LocalFree
_lopen
_lread
GetLastError
_lwrite
_llseek
DeleteFileA
GetFileSize
FreeLibrary
InterlockedExchangeAdd
GetProcAddress
LoadLibraryW
TlsSetValue
LockResource
LoadResource
SizeofResource
FindResourceW
GlobalFree
GlobalUnlock
GlobalLock
LoadLibraryExW
SetErrorMode
IsDBCSLeadByte
lstrlenA
lstrcmpiW
lstrcmpW
lstrcpyW
lstrlenW
CloseHandle
CreateFileW
GetSystemDirectoryW
GetWindowsDirectoryW
MoveFileW
DeleteFileW
GetFileAttributesW
lstrcpynW
WideCharToMultiByte
TlsFree
TlsAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnicodeStringToAnsiString
RtlAllocateHeap
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
sprintf
NlsMbCodePageTag
RtlFreeAnsiString
RtlInitUnicodeString
RtlxUnicodeStringToAnsiSize
_wcsicmp
wcslen
wcsncpy
wcscpy
RtlUnwind
NtQueryVirtualMemory
vwrwlxfdonstub
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueIndexA
VerQueryValueIndexW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ