F1
F2
F3
F4
F5
F7
F8
F9
Static task
static1
Behavioral task
behavioral1
Sample
d9e96bd6d897b9409c8cd8dd25e39c91_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d9e96bd6d897b9409c8cd8dd25e39c91_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d9e96bd6d897b9409c8cd8dd25e39c91_JaffaCakes118
Size
375KB
MD5
d9e96bd6d897b9409c8cd8dd25e39c91
SHA1
a02a2933f06078d96cde9db152d83f76b0485a24
SHA256
c1cbaffc891521927c4d6ce067e461ad587cfc0ed8651dc7d520a8ff49ec2e0c
SHA512
9bb868232f26a6217997730fd6c9235873b06e8a9ef1d3215f4bc63cbdadd2e0e8684fe9b741a4aedf31882427d67f0a48d293d84f54b77fd4753d157a077e7c
SSDEEP
3072:ME+AKWWGx+JHjnVrTX6YrxWqLtmGN64Ng5leoJJfLYExsFXg:QJmCHjVr7bWItlS5fsFXg
Checks for missing Authenticode signature.
resource |
---|
d9e96bd6d897b9409c8cd8dd25e39c91_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
AccessibleObjectFromWindow
AccessibleChildren
CreateFileA
LCMapStringW
LCMapStringA
LocalFree
LocalSize
LocalAlloc
lstrlenW
lstrcmpiW
lstrcpynW
FreeLibrary
GetProcAddress
LoadLibraryW
lstrcatA
lstrcpynA
VerLanguageNameA
lstrlenA
lstrcmpiA
CreateThread
lstrcpyA
GetCurrentThread
__C_specific_handler
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetCommandLineA
CloseHandle
ResumeThread
SetThreadPriority
GetThreadPriority
VirtualAlloc
VirtualQuery
GetSystemInfo
VirtualFree
Sleep
GetThreadContext
FlushInstructionCache
VirtualProtectEx
GetCurrentProcess
GetCurrentThreadId
GetSystemDirectoryA
MapViewOfFile
GetLastError
CreateFileMappingA
SetLastError
LoadLibraryA
UnmapViewOfFile
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
HeapReAlloc
InitializeCriticalSection
SetStdHandle
SetFilePointer
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SuspendThread
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
RtlLookupFunctionEntry
RtlUnwindEx
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RaiseException
RtlPcToFileHeader
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
FlsSetValue
GetVersionExA
GetProcessHeap
FlsGetValue
TlsFree
FlsFree
TlsSetValue
FlsAlloc
RtlVirtualUnwind
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DeleteCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ExitProcess
HeapSetInformation
HeapCreate
HeapDestroy
PostMessageA
CharLowerA
IsWindow
EnumWindows
EnumChildWindows
GetWindowThreadProcessId
GetWindowTextW
GetAncestor
SendMessageW
SetWindowsHookExA
GetClassNameA
GetWindowTextA
GetWindowRect
FindWindowExA
wsprintfA
RegisterWindowMessageA
IsWindowVisible
GetWindowLongA
GetParent
CallNextHookEx
RegisterWindowMessageW
SendMessageTimeoutA
MessageBoxW
SendMessageA
UnhookWindowsHookEx
GetSecurityDescriptorSacl
SysFreeString
VariantInit
F1
F2
F3
F4
F5
F7
F8
F9
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ