OnSessionChange
Refresh
StartComponent
StopComponent
Static task
static1
Behavioral task
behavioral1
Sample
dabc04cf130f0acf545892c978b4c4f7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dabc04cf130f0acf545892c978b4c4f7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dabc04cf130f0acf545892c978b4c4f7_JaffaCakes118
Size
281KB
MD5
dabc04cf130f0acf545892c978b4c4f7
SHA1
83ff40cb2df4278816d7037984da902d502e204f
SHA256
755ea1ffeec183ee8cd3b686bb0d73babf5f91e608b3ff92b1793f2ca6523384
SHA512
5c89fb1ec8b71ff6d4e369bf5050170f576b321bebec1d32a7965de8aae816f04f13032ec54d667e83e36650c0a00b7f0310bd98e5d2bec5072e25ebcf17c856
SSDEEP
6144:MYSft7m9EUd/9hwSLDNHmt5QFnLtrrrKA6KuyUINUv:MpAxwODNHmt6nLtrrrOLjINUv
Checks for missing Authenticode signature.
resource |
---|
dabc04cf130f0acf545892c978b4c4f7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
memset
wcslen
wcscpy
wcscat
wcsncpy
memcpy
strncpy
memmove
wcscmp
HeapCreate
HeapDestroy
HeapAlloc
GetModuleHandleW
UnregisterWait
CloseHandle
EnterCriticalSection
LeaveCriticalSection
HeapFree
TlsFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
TlsGetValue
GetCurrentProcess
GetCurrentThread
DuplicateHandle
RegisterWaitForSingleObject
TlsSetValue
GetCurrentProcessId
GetCurrentThreadId
FreeLibrary
LoadLibraryW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
MessageBoxW
CharLowerW
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
GetWindowLongPtrW
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
CoInitialize
closesocket
WSACleanup
WSAStartup
select
__WSAFDIsSet
ioctlsocket
recvfrom
GetSaveFileNameW
GetOpenFileNameW
InitCommonControlsEx
OnSessionChange
Refresh
StartComponent
StopComponent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ