ExecuteBang
Finalize
GetString
Initialize
Reload
Update
Static task
static1
Behavioral task
behavioral1
Sample
c19fb7c40151bbcdbbe3234c3798f9ee_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c19fb7c40151bbcdbbe3234c3798f9ee_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c19fb7c40151bbcdbbe3234c3798f9ee_JaffaCakes118
Size
365KB
MD5
c19fb7c40151bbcdbbe3234c3798f9ee
SHA1
92a707ae81c39d01d2ce58f2ec007bccbe73ce02
SHA256
c5e26cd718715903a3930996808d9d57cea553d61fcbcfeef333ad0c9b0412a0
SHA512
5c2f1182ce4d33f83985332e0008ddb13b8f50c226bf6edaf89028a52d7ee444e5d04432baa2f5da27b05ef0e01d11705d0449e8ea5b6d6509f5b4e9129b1fbe
SSDEEP
6144:aKkAOzo7XgM2EKfYQoqcmEYrIbx6sHYgfZ4q7Kj224n6gMT1L3pxKgm+nnnndgtW:wu7XgBEKXNcmAxtFR/73yTx3ugpnndOW
Checks for missing Authenticode signature.
resource |
---|
c19fb7c40151bbcdbbe3234c3798f9ee_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RmLog
RmExecute
RmReplaceVariables
RmReadString
RmLogF
RmReadFormula
RmGet
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
CopyFileW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
GetPrivateProfileStringW
CreateFileW
ReadFile
SetStdHandle
HeapSize
ReadConsoleW
SetEndOfFile
WriteConsoleW
GetCommandLineW
GetLocaleInfoW
FindFirstFileExW
FindClose
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapAlloc
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleCP
WriteFile
HeapReAlloc
HeapFree
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
WideCharToMultiByte
CloseHandle
DuplicateHandle
WaitForSingleObjectEx
Sleep
GetCurrentProcess
SwitchToThread
GetCurrentThread
QueryPerformanceCounter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetProcAddress
GetLastError
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
CreateTimerQueue
SetEvent
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
RtlUnwind
RaiseException
GetFileAttributesExW
ExitThread
PrivateExtractIconsW
ReleaseDC
FindWindowW
DestroyIcon
GetIconInfo
GetDC
FindWindowExW
PostMessageW
GetWindow
GetObjectW
DeleteObject
GetDIBits
GetOpenFileNameW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
ord727
SHCreateItemFromParsingName
SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
ord173
ord217
GdipDisposeImage
GdipBitmapGetPixel
GdipCreateBitmapFromHBITMAP
GdipAlloc
GdipCloneImage
GdipFree
ExecuteBang
Finalize
GetString
Initialize
Reload
Update
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ