LoadProfile
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
dcfeee4da46947c8b11c99b5f4de239f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dcfeee4da46947c8b11c99b5f4de239f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dcfeee4da46947c8b11c99b5f4de239f_JaffaCakes118
Size
28KB
MD5
dcfeee4da46947c8b11c99b5f4de239f
SHA1
7ae49be5a26d44c5ab87536d401d78e346c1114a
SHA256
4c0440c32ee201382d06d2ed307df3b66298c587a4202fa4cfc2f01a11b3be8d
SHA512
8b105ed20e6c722184a92f4da6e80f804f260d1e97fd9c5b4800b8d311c91d23ccfd82784f70244e56b9251a7da4efae491057611e5f8d7020384fa823463c6f
SSDEEP
192:GgpkweRaTI/L9YdBY6Rvdey7OltO+s01rmoS5UsIWM:/Ru+I/L9YfrVX6G+s01rmo8M
Checks for missing Authenticode signature.
resource |
---|
dcfeee4da46947c8b11c99b5f4de239f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetSetOptionA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile
EnumProcesses
GetModuleFileNameExA
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord3147
ord4622
ord4424
ord3738
ord561
ord815
ord826
ord269
ord2982
ord5714
ord600
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord1578
ord6467
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord823
ord825
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1168
ord1575
ord1176
ord4080
ord1116
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
_strupr
__CxxFrameHandler
strcat
strlen
fseek
fread
strstr
memcpy
fwrite
fclose
sprintf
memset
fopen
DisableThreadLibraryCalls
GetModuleFileNameA
CreateThread
DeleteFileA
Sleep
GetProcAddress
FreeLibrary
CloseHandle
lstrcmpA
WriteProcessMemory
VirtualAllocEx
lstrlenW
OpenProcess
MultiByteToWideChar
LocalFree
LocalAlloc
GetCurrentProcess
lstrcpyA
ExitProcess
FreeLibraryAndExitThread
VirtualFreeEx
WaitForSingleObject
LoadLibraryA
GetModuleHandleA
CreateRemoteThread
CharUpperA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
RegCreateKeyExA
LoadProfile
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ