UninstInitialize
UninstUnInitialize
UninstallSoftware
isUserAdmin
Static task
static1
Behavioral task
behavioral1
Sample
cfd09a1ecab6fffb5de4ad1edefff48e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfd09a1ecab6fffb5de4ad1edefff48e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cfd09a1ecab6fffb5de4ad1edefff48e_JaffaCakes118
Size
140KB
MD5
cfd09a1ecab6fffb5de4ad1edefff48e
SHA1
84ef444d270d673ad3e7f3dda09619a134f1a2bd
SHA256
23e21b96397237f9ce7a8f9b992624c9474c0a0abd32b0db81237a661fa86b0f
SHA512
1f3e38a3d29150998c3264b94dbdda47127a8975b868353b421d62ba2fd098880d33598efcf01f0df5746451c566197f1701766d64b6daaff629e11a354b10e3
SSDEEP
3072:FjChqLs2KUNOioh76KCBDXAntzBXFpjdPo/:FjOqLPWmKGcntzVFpj
Checks for missing Authenticode signature.
resource |
---|
cfd09a1ecab6fffb5de4ad1edefff48e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessA
WaitForSingleObject
GetModuleFileNameA
MultiByteToWideChar
FreeEnvironmentStringsA
SetFilePointer
SetStdHandle
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetVersionExA
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
CloseHandle
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
DispatchMessageA
TranslateMessage
PeekMessageA
OpenSCManagerA
RegQueryValueExA
RegOpenKeyA
CloseServiceHandle
UninstInitialize
UninstUnInitialize
UninstallSoftware
isUserAdmin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ