DumpBox
DumpHashes
DumpLsa
Static task
static1
Behavioral task
behavioral1
Sample
deadbee3027da082433f83b42db8f83e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
deadbee3027da082433f83b42db8f83e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
deadbee3027da082433f83b42db8f83e_JaffaCakes118
Size
3.3MB
MD5
deadbee3027da082433f83b42db8f83e
SHA1
6cb97d632e79cd16f8d6c79b9807d4039c0da1f3
SHA256
e261b84798ae3d0ee006c6cda7e91364735faa5e77f3657d3300ea3b396aa863
SHA512
4e18b8506906d30c2c8c6e350a99ebd92a38ca9097b6e28cc6d43d02f4daa4a3ae15e630db1bedf910c4ef7d68f7edac74918c1906dda5e4bbc95e3fb2f6bbf9
SSDEEP
24576:KLYOwYlBOTlJuuhgxlKhpak1Zic2AHM6KEgZC/NJBB3oio+KMIf+LZk0:Kk3YlBOxJujlKhpakic2AHFKEh/NJrj
Checks for missing Authenticode signature.
resource |
---|
deadbee3027da082433f83b42db8f83e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
WideCharToMultiByte
FreeLibrary
InterlockedDecrement
InterlockedIncrement
GetLastError
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
HeapFree
CloseHandle
InitializeCriticalSection
WriteFile
DeleteCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
FlushFileBuffers
CreateFileA
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
ReadFile
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetParent
GetWindowTextA
SendMessageA
LsaQueryInformationPolicy
LsaClose
RegOpenKeyExA
RegEnumKeyW
LsaFreeMemory
RegCloseKey
LsaOpenPolicy
DumpBox
DumpHashes
DumpLsa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ