OnFireFoxUserData
Start
Stop
TmStart
TmStop
Static task
static1
Behavioral task
behavioral1
Sample
c07a8e9b4e9827768587313f585759fd_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c07a8e9b4e9827768587313f585759fd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c07a8e9b4e9827768587313f585759fd_JaffaCakes118
Size
357KB
MD5
c07a8e9b4e9827768587313f585759fd
SHA1
58243028a32e9a34231d232b704c98615bded63d
SHA256
cbb59bc8df8c0ee41dc12cc68fd259f3fdce9c2b873bcc540924d8b75c3ed14a
SHA512
e63d4daf10db99e72d4cc84fdcfc6d5626e8fb86acbb66dce9bc6a4f3321d4c75281120b5083406e452418256b933a8aaa34f066d98ee9cf081c94b58002ef65
SSDEEP
6144:XI51qUrt9zqh+9QtrTZrKT9KHiiiiiiiY+LTuozhlFh1bx1anm:gr9zq0IrT4iUyo7h7
Checks for missing Authenticode signature.
resource |
---|
c07a8e9b4e9827768587313f585759fd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Netbios
InternetSetOptionA
HttpAddRequestHeadersA
HttpQueryInfoA
InternetReadFileExA
InternetCrackUrlA
InternetOpenA
InternetConnectA
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetSetStatusCallback
ImageDirectoryEntryToData
UuidCreate
RpcStringFreeA
UuidToStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
lstrcpyA
lstrcmpiA
lstrlenA
WaitForSingleObject
WriteProcessMemory
GetCurrentProcess
GetProcAddress
GetModuleHandleA
LocalFree
MoveFileA
ReadFile
GetFileSize
DeleteFileA
CloseHandle
WriteFile
SetFilePointer
CreateFileA
GetFileAttributesA
lstrcatA
GetTempFileNameA
GetWindowsDirectoryA
GetLocalTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventA
SetEvent
SetEndOfFile
GetLastError
FreeLibrary
GetStringTypeA
Sleep
TerminateThread
GetSystemTime
CreateThread
CreateMutexA
ReleaseMutex
GetTickCount
GetModuleFileNameA
GetSystemDirectoryA
GetTempPathA
GetPrivateProfileStringA
WritePrivateProfileStringA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateDirectoryA
lstrcpynA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetLocaleInfoA
HeapReAlloc
VirtualAlloc
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
LoadLibraryA
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetStdHandle
HeapSize
GetConsoleCP
OpenDesktopA
SetThreadDesktop
CloseDesktop
GetMessageA
TranslateMessage
DispatchMessageA
SetTimer
PostThreadMessageA
wsprintfA
KillTimer
GetSecurityDescriptorSacl
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegOpenKeyExA
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
ShellExecuteExA
CoUninitialize
CoInitialize
OnFireFoxUserData
Start
Stop
TmStart
TmStop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ