AddAtomS
AddAtomT
Entry
Static task
static1
Behavioral task
behavioral1
Sample
db1156b072d58acdac1aeab9af2160a2_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
db1156b072d58acdac1aeab9af2160a2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
db1156b072d58acdac1aeab9af2160a2_JaffaCakes118
Size
176KB
MD5
db1156b072d58acdac1aeab9af2160a2
SHA1
caf5019e06421b94009c0a16f9bc1d9375ef63a6
SHA256
15580d72045b0806d99cde386e42bf3f078746c4194b0932efc6fcdb9104898d
SHA512
38086ddbf172098377e1cec003371b635d456ca3cd522fa2da6dd609cc5844f816ca8e1e466acc03e0658a493071446369292dfcfe0ea4f1dd3345cf586ad5c2
SSDEEP
3072:bvTAJb87EbgF+PXoczloKv4Gvvpuv1pINjR4lUamHKl+:gJbI7FTwloKQbfq91amQ
Checks for missing Authenticode signature.
resource |
---|
db1156b072d58acdac1aeab9af2160a2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
FindClose
FindFirstFileA
UnmapViewOfFile
GetLastError
MapViewOfFile
CreateFileMappingA
GetFileSize
lstrcmpA
GetTempFileNameA
GetTempPathA
SetLastError
SetFileAttributesA
CopyFileA
WriteFile
GetPrivateProfileStringA
FindNextFileA
OpenEventA
GetVolumeInformationA
GetDriveTypeA
ExitProcess
GetModuleHandleA
GetModuleFileNameA
SetFilePointer
ReadFile
CreateProcessA
Sleep
lstrcatA
GetSystemDirectoryA
GetSystemTime
SetFileTime
GetTempPathW
DeleteFileA
GetEnvironmentVariableW
GetComputerNameW
GetTimeZoneInformation
GetLocalTime
MultiByteToWideChar
lstrcatW
lstrlenW
GetVersionExA
GetComputerNameA
WaitForSingleObject
ResumeThread
TerminateProcess
GetTickCount
FileTimeToSystemTime
GetWindowsDirectoryA
GetEnvironmentVariableA
CreateDirectoryA
CreateMutexA
ReleaseMutex
OutputDebugStringA
GetFileTime
InterlockedIncrement
InterlockedDecrement
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
lstrcpyA
CreateFileA
GetFileInformationByHandle
CloseHandle
FileTimeToLocalFileTime
lstrlenA
FileTimeToDosDateTime
GetFileAttributesA
GetWindowsDirectoryW
IsBadCodePtr
IsBadReadPtr
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlushFileBuffers
GetStartupInfoA
GetStdHandle
SetHandleCount
SetEndOfFile
HeapAlloc
HeapFree
GetFileType
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
GetCurrentProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
TlsAlloc
TlsFree
SetStdHandle
RegisterClassExA
CreateWindowExA
DefWindowProcA
CharLowerBuffA
wsprintfA
wsprintfW
GetMessageA
TranslateMessage
DispatchMessageA
RegCreateKeyA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegCloseKey
UuidToStringA
UuidCreate
RpcStringFreeA
inet_ntoa
gethostbyname
WSAStartup
WSACleanup
AddAtomS
AddAtomT
Entry
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ