NP_GetEntryPoints
NP_Initialize
NP_Shutdown
Static task
static1
Behavioral task
behavioral1
Sample
d3268a8bf126278dc3def536a6a02ef9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d3268a8bf126278dc3def536a6a02ef9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d3268a8bf126278dc3def536a6a02ef9_JaffaCakes118
Size
304KB
MD5
d3268a8bf126278dc3def536a6a02ef9
SHA1
8259309925d7f933294a311bbd2dc6f9c3a275d1
SHA256
8dd4d20d9ae61279eb82ab993728ec4261d77677845e46e51af9adb120b14ff8
SHA512
fdc5cc078ebb690581d07981f88ccc662df6e64de2e900423adaafef622192fba3fe70ccd66fa3bfe9e843797052c0e00cf87aff3cc77dc139287b7099d23405
SSDEEP
6144:Tq97WT7kuqfZxbOqz5l23clvRcGXexEG/:0Tu8bOqzPlv3OWG/
Checks for missing Authenticode signature.
resource |
---|
d3268a8bf126278dc3def536a6a02ef9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NS_CStringSetData
ExitProcess
GetStringTypeW
InterlockedIncrement
Beep
InterlockedDecrement
GetStringTypeA
LCMapStringW
InitializeCriticalSection
GetLastError
MultiByteToWideChar
WideCharToMultiByte
HeapFree
GetProcessHeap
RtlUnwind
RaiseException
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
LCMapStringA
FillRect
OleRun
CoCreateInstance
CoInitializeEx
VariantClear
VariantChangeType
VariantInit
SysFreeString
SysStringLen
SysAllocString
GetErrorInfo
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE