InstallUpdates
NSC_GetFunctionList
Static task
static1
Behavioral task
behavioral1
Sample
de0428d52e884d579a17ab8c2ba37469_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
de0428d52e884d579a17ab8c2ba37469_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
de0428d52e884d579a17ab8c2ba37469_JaffaCakes118
Size
41KB
MD5
de0428d52e884d579a17ab8c2ba37469
SHA1
83968d81bec12e7d5223008ae837caea3e63b112
SHA256
6347712ef67185acbbddbc89acdaab565ecf767b38e9f812c5f21354ca4b70d7
SHA512
c340d1410950c324f7643d0a60cabbd5f34cc0255decfb910e8bae7a308afb6ff287130629af0436881c8f3c3b8933da3f065f8137478994aa86bd25bdd6b20d
SSDEEP
768:hOShVFPLMOoxljn3pLRf1iDNUu7sGIRVznH9qwbklFSxKleZYHWL:hOSDpylT3DQDtYGWjowbkl0KleeHWL
Checks for missing Authenticode signature.
resource |
---|
de0428d52e884d579a17ab8c2ba37469_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateFileMappingA
DeviceIoControl
DuplicateHandle
ExitProcess
FatalAppExitA
FindResourceA
FreeEnvironmentStringsA
GetACP
GetCommandLineA
GetConsoleMode
GetCurrentProcess
GetDriveTypeA
GetModuleHandleA
GetOEMCP
GetProcessWorkingSetSize
GetStartupInfoA
GetStringTypeA
GlobalReAlloc
HeapAlloc
HeapCreate
HeapReAlloc
MultiByteToWideChar
RtlUnwind
SetErrorMode
SetLastError
SetUnhandledExceptionFilter
lstrcmpA
lstrcmpiA
lstrcpynA
__p__commode
__set_app_type
exit
free
__getmainargs
InvalidateRgn
GetSysColorBrush
BeginPaint
CloseClipboard
GetUserObjectSecurity
StringFromGUID2
CoCreateInstance
InstallUpdates
NSC_GetFunctionList
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ