UnenableRouter
CreateProcessNotify
DllClientCleanup
GetOwnerModuleFromUdp6Entry
GetAdaptersInfo
InternalGetIfTable
PnPuelog
GetTcpStatistics
DllClientStartup
Static task
static1
Behavioral task
behavioral1
Sample
cf1add0e3307860fa3cfab7a74d548a2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf1add0e3307860fa3cfab7a74d548a2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cf1add0e3307860fa3cfab7a74d548a2_JaffaCakes118
Size
43KB
MD5
cf1add0e3307860fa3cfab7a74d548a2
SHA1
61f6ee12534838cd173360955f369fe7f7897685
SHA256
447984f84e5bf1b26e6bb44ad985fa7edad421b1d59d87d2b770f0b01f33b50f
SHA512
091666d880befe97606da27f697c2f893b341cddb888140492c4220fba784c646246ef5ba1ca75625d0b24c0aea00d0ebc9fc79e72c570c22aa94801c459134d
SSDEEP
768:+0jJQ081tVJhlSYLnFRhSyeqMoJTy0iH5PmuvaRZ/BxSD2HvfdAqFwbIZnFSZo:+uQ0qDlxjBMoJVsCRhRNA+TZn6
Checks for missing Authenticode signature.
resource |
---|
cf1add0e3307860fa3cfab7a74d548a2_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessW
InterlockedDecrement
GetVersionExW
VirtualAlloc
GetTimeFormatW
GlobalAlloc
MoveFileW
SetUnhandledExceptionFilter
LocalAlloc
LockResource
QueryPerformanceFrequency
FindResourceExW
OutputDebugStringA
CreateWaitableTimerA
GetFullPathNameW
GetSystemTimeAsFileTime
SetThreadExecutionState
CloseHandle
WritePrivateProfileSectionW
GetEnvironmentVariableW
InterlockedExchange
GetCurrentThread
SetWaitableTimer
SetCurrentDirectoryA
GetModuleFileNameW
HeapFree
CreateEventA
CreateProcessA
IsDebuggerPresent
NtImpersonateClientOfPort
NtDelayExecution
ZwDuplicateObject
ZwFlushVirtualMemory
ZwFlushKey
NtCreateThread
NtOpenEvent
ZwOpenEventPair
UnenableRouter
CreateProcessNotify
DllClientCleanup
GetOwnerModuleFromUdp6Entry
GetAdaptersInfo
InternalGetIfTable
PnPuelog
GetTcpStatistics
DllClientStartup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ