InstallPlugin
PluginVersion
TerminatePlugin
Static task
static1
Behavioral task
behavioral1
Sample
c774b80412ad27de774b276b9de6bcb0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c774b80412ad27de774b276b9de6bcb0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c774b80412ad27de774b276b9de6bcb0_JaffaCakes118
Size
108KB
MD5
c774b80412ad27de774b276b9de6bcb0
SHA1
7ff9d2eb2a3d1970ad47aea10d09dbbf158f4c7b
SHA256
ed00cf21fcbf9861a3a330b16e268f344932e6ba4b726db2f20f091e7baf62d5
SHA512
a5c07e29667cb34bf2bba41187caf52e38c7083940a70d189a10be0531d879040b19c4bd22445fccaf673302956af2a9e33257f9e39429ff4141471db3d88bea
SSDEEP
1536:z8M/33yvT+aZ4lcd3Gwi0cBTl/xD3+EBE3az7ARy1NsXpoygbjHDMkT9wI:zNiTSm3+4EuqPHsXpoyg3jMkpw
Checks for missing Authenticode signature.
resource |
---|
c774b80412ad27de774b276b9de6bcb0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetDriveTypeA
WriteFile
CreateFileA
GetDiskFreeSpaceA
GetCurrentProcess
GlobalMemoryStatus
ReadFile
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetSystemInfo
OpenProcess
SetPriorityClass
FindNextFileA
FindClose
GetFileAttributesA
CopyFileA
DeleteFileA
CreateProcessA
GetVersionExA
WideCharToMultiByte
GetLastError
CloseHandle
lstrlenA
LocalAlloc
lstrcpynA
GetComputerNameA
TerminateProcess
SetThreadPriority
Sleep
WaitForSingleObject
CreateThread
FindFirstFileA
SetFilePointer
GetModuleFileNameA
LocalFree
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
HeapReAlloc
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapFree
lstrcmpiA
lstrcpyA
RtlUnwind
HeapAlloc
VirtualAlloc
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
MultiByteToWideChar
GetStringTypeA
SetEnvironmentVariableA
CompareStringW
CompareStringA
VirtualFree
GetCPInfo
GetOEMCP
GetACP
GetStringTypeW
wsprintfA
GetDesktopWindow
IsWindowVisible
IsWindow
CharToOemA
ExitWindowsEx
ShowWindow
FindWindowExA
FindWindowA
MessageBoxA
SendMessageA
CallNextHookEx
ToAscii
GetKeyboardState
GetKeyNameTextA
GetWindowTextA
GetActiveWindow
UnhookWindowsHookEx
DispatchMessageA
SetKeyboardState
GetMessageA
PeekMessageA
SetWindowsHookExA
CharUpperA
GetDIBColorTable
SelectObject
CreateDIBSection
DeleteDC
CreateCompatibleDC
GetDeviceCaps
CreateDCA
DeleteObject
BitBlt
RegOpenKeyExA
RegSetKeySecurity
InitializeAcl
RegCloseKey
RegConnectRegistryA
RegQueryValueExA
SetSecurityDescriptorDacl
GetAce
AddAccessAllowedAce
InitializeSecurityDescriptor
GetLengthSid
LookupAccountNameA
RegEnumKeyExA
GetUserNameA
RegCreateKeyExA
RegSetValueExA
ShellExecuteA
SHFileOperationA
mciSendCommandA
setsockopt
gethostname
WSAGetLastError
WSACleanup
WSAStartup
bind
ntohs
accept
inet_ntoa
select
htonl
send
ntohl
ioctlsocket
gethostbyname
socket
htons
sendto
closesocket
connect
recv
getsockname
listen
InstallPlugin
PluginVersion
TerminatePlugin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ