CNNICCompatible
CarboniteCompatible
ChromeCompatible
DllMain
GoogleCompatible
RP12Compat
RP12CompatCheck
RP12CompatCheckCN
RP12InstallCheck
RemoveOldEvents
StubInstall
SuperPassEnabled
Static task
static1
Behavioral task
behavioral1
Sample
cf449873983f4d79807da5cd9fd4dc9d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
cf449873983f4d79807da5cd9fd4dc9d_JaffaCakes118
Size
216KB
MD5
cf449873983f4d79807da5cd9fd4dc9d
SHA1
06fab224082ba37752d4da4ff371f43a1bcf6a6e
SHA256
0346752acfb06c01ce7f9b9153ec77395e6d54120789094f13ecd35991edb225
SHA512
9128db0e7c81845b6ad4061c89dd6298a996cf890b56dc6d5586f4b8b50b8517454b85590a758b5a64e06ff1b28e83d1e954ee5a86a70f2bde780610e468e9ff
SSDEEP
3072:lJpDs07ptjGMaB0FjOO/7mMJ0lCuh8QmAyRVqXgA5pDcSeGz8:zOiDGMaB0pf7mk4kzRsXbji+
Checks for missing Authenticode signature.
resource |
---|
cf449873983f4d79807da5cd9fd4dc9d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHGetValueA
CharNextA
GetSystemMetrics
GetWindowThreadProcessId
EnumWindows
GetClassNameA
GetWindowTextA
IsValidSid
GetLengthSid
InitializeAcl
AddAccessDeniedAce
AddAccessAllowedAce
InitializeSecurityDescriptor
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenProcessToken
GetTokenInformation
EqualSid
RegSetValueA
RegQueryValueA
FreeSid
AllocateAndInitializeSid
LookupAccountNameA
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
GetUserNameA
SHGetSpecialFolderPathA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
LCMapStringW
SetStdHandle
IsBadReadPtr
IsBadCodePtr
FlushFileBuffers
SetEnvironmentVariableA
GetTimeZoneInformation
LCMapStringA
GetStringTypeW
GetStringTypeA
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
InterlockedExchange
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetLastError
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
lstrcpyA
CloseHandle
ReadFile
PeekNamedPipe
WriteFile
Process32Next
OpenProcess
Process32First
CreateToolhelp32Snapshot
GetVersionExA
FreeLibrary
GetProcAddress
LoadLibraryA
IsBadWritePtr
FindClose
DeleteFileA
FindNextFileA
FindFirstFileA
GetFileSize
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableW
GetPrivateProfileStringA
GetModuleFileNameA
TerminateProcess
GetFileAttributesA
CreateDirectoryA
GetTempPathA
GetTickCount
InterlockedIncrement
InterlockedDecrement
GetSystemInfo
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetTempFileNameA
GetACP
GetLocaleInfoA
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
VirtualQuery
RtlUnwind
ExitProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
HeapReAlloc
GetOEMCP
GetCPInfo
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
GetFileType
SetEndOfFile
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
GetModuleHandleA
GetCurrentProcess
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
HeapSize
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
CNNICCompatible
CarboniteCompatible
ChromeCompatible
DllMain
GoogleCompatible
RP12Compat
RP12CompatCheck
RP12CompatCheckCN
RP12InstallCheck
RemoveOldEvents
StubInstall
SuperPassEnabled
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ