CreateSX
GetOut
Xreloader
Static task
static1
Behavioral task
behavioral1
Sample
c884f0afc2a521065cef1714bcf913b7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c884f0afc2a521065cef1714bcf913b7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c884f0afc2a521065cef1714bcf913b7_JaffaCakes118
Size
146KB
MD5
c884f0afc2a521065cef1714bcf913b7
SHA1
7ee100ba34002a3a01611b751b299c63c97f68cf
SHA256
fa7b321a6748251e9fd868c447da5690f5a9c806046d4164e91b6884c9640322
SHA512
b98e7890e21782b9df6d1a74353ac1305ecf83fcf5ae3e15b0e5677107ad9c62ea75b1e03740dc43dfb2c45bc9233a26a4a8ca84c7f9d2f30b4a3ec5ba8ca74b
SSDEEP
1536:33zJXVcS1pYH/wvQXKa9zdJOpsiH102L/iTV1t3PB1V8vwMmgirv4Op4x2jXEnUn:3dlcS4NKaxLm0aiTV1vH8vtiD7HEns
Checks for missing Authenticode signature.
resource |
---|
c884f0afc2a521065cef1714bcf913b7_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
lstrcmpiA
ExitProcess
Sleep
GetLastError
VirtualProtect
VirtualFree
LoadLibraryA
GetModuleHandleA
VirtualAlloc
CreateThread
SetFileApisToANSI
CloseHandle
UnlockFileEx
LockFileEx
WriteFile
PulseEvent
CreateEventA
lstrlenA
CreateFileA
MessageBoxW
PostQuitMessage
KillTimer
SetCursor
SetCursorPos
GetWindowRect
IsIconic
SetTimer
GetCursorPos
GetDesktopWindow
MessageBoxA
CreateSX
GetOut
Xreloader
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ