NSGetModule
NSModule
Static task
static1
Behavioral task
behavioral1
Sample
d15fc3d15b3bbe81f9dc1db715e2d4e9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d15fc3d15b3bbe81f9dc1db715e2d4e9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d15fc3d15b3bbe81f9dc1db715e2d4e9_JaffaCakes118
Size
2.1MB
MD5
d15fc3d15b3bbe81f9dc1db715e2d4e9
SHA1
a949c380ef426c928f5b4c487d670500f486cfba
SHA256
9e8e10c290cb137f403c4418ed5ad155620082837df450f08cb26706cce1ebf8
SHA512
1d77fc1b918017f9353df6a4eb30dbe5968a367ca38e3fa28d9a3ca0c2fbd56813666f217b0486826e9f09f5fc48ab86f7975a0eeb9d614d3d97a321ccaa5338
SSDEEP
49152:yuszayKsveF/1cGxR86LbTzH7yZsoslrVO:0bfWZa6Xb
Checks for missing Authenticode signature.
resource |
---|
d15fc3d15b3bbe81f9dc1db715e2d4e9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryA
SetEnvironmentVariableA
GetLocaleInfoW
SetEndOfFile
CreateFileA
GetCurrentDirectoryW
CreateFileW
SetStdHandle
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
ReadFile
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
FreeLibrary
LoadLibraryW
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
RaiseException
HeapFree
GetLastError
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetDriveTypeW
FindFirstFileW
HeapAlloc
HeapReAlloc
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
CloseHandle
SetFilePointer
FlushFileBuffers
UnhandledExceptionFilter
GetFullPathNameA
GetCurrentDirectoryA
GetFullPathNameW
IsWindow
SetWindowLongW
IsWindowVisible
NS_StringContainerFinish
NS_StringContainerInit
NS_StringContainerInit2
NS_CStringGetData
NS_CStringContainerFinish
NS_CStringSetData
NS_CStringContainerInit
NS_Free
NS_StringGetData
NS_Alloc
NS_GetServiceManager
NS_GetComponentManager
PR_AtomicDecrement
PR_AtomicIncrement
SysFreeString
VariantClear
SysAllocString
NSGetModule
NSModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ