AddPicture2
EnumTvValueNext
GetDevice
GetLastError
Launch
Malloc
MemGetInfo
Memcpy2DToArray
ReadDevParamFromRAW
ReflectParamValues
Static task
static1
Behavioral task
behavioral1
Sample
e04f5e86e38a56c01e215bf1f17b9c0a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e04f5e86e38a56c01e215bf1f17b9c0a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e04f5e86e38a56c01e215bf1f17b9c0a_JaffaCakes118
Size
219KB
MD5
e04f5e86e38a56c01e215bf1f17b9c0a
SHA1
78c79c577006f2f611656258c8e762cd52325135
SHA256
767f294a76552c36588bbec1fc0aaf4692b597f11c84684a655cfc91c2c939e7
SHA512
94501230b3bbc7c365a95100e3ac1da0a8cab83afc8b27bfb8955a96f89417ac7e0011cd856124e8250560e2a6e63905f113ce0697e06ce802d5f55e6b5136de
SSDEEP
3072:oBzbgeOsx7jNaxjQ+KVlxSbYMpnQcKKc94ncrS6BbX8M2e4HssPB1jf5:+FjBwQrVlx4YMpnQ/ZlW6BbX8Pvh
Checks for missing Authenticode signature.
resource |
---|
e04f5e86e38a56c01e215bf1f17b9c0a_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VariantClear
SysFreeString
VariantInit
SysAllocString
CoCreateInstance
CLSIDFromString
CoTaskMemFree
iswspace
iswxdigit
malloc
memcpy
memmove
memset
strrchr
towupper
wcschr
wcsrchr
wcsstr
wcstod
wcstol
wcstoul
wctomb
isleadbyte
free
_wtol
_write
_wcsupr
_wcsnicmp
_wcsicmp
_vsnwprintf
_unlock
_ultow
_stricmp
_snprintf
_purecall
_onexit
_lseeki64
_lock
_itoa
_isatty
_iob
_initterm
_fileno
_errno
_callnewh
_amsg_exit
__pioinfo
__dllonexit
__badioinfo
_XcptFilter
_CxxThrowException
CreateSemaphoreA
CreateFileW
DebugBreak
CreateSemaphoreW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualProtect
VirtualAlloc
VerifyVersionInfoW
VerSetConditionMask
UnhandledExceptionFilter
TerminateProcess
Sleep
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetConsoleTextAttribute
RtlUnwind
ReleaseSemaphore
ReadFile
QueryPerformanceCounter
OutputDebugStringA
MultiByteToWideChar
LocalReAlloc
LocalFree
LocalAlloc
LoadLibraryA
LeaveCriticalSection
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
HeapWalk
HeapUnlock
HeapReAlloc
HeapLock
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalFree
GlobalAlloc
GetVersion
GetTickCount
GetSystemTimeAsFileTime
GetSystemInfo
GetStdHandle
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLocalTime
GetLastError
GetFileSize
GetEnvironmentVariableW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
GetACP
FormatMessageW
FormatMessageA
FlushFileBuffers
FindNextFileW
FindFirstFileW
FindClose
ExpandEnvironmentStringsW
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
DeleteTimerQueueTimer
DeleteCriticalSection
CloseHandle
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
DeregisterEventSource
AddPicture2
EnumTvValueNext
GetDevice
GetLastError
Launch
Malloc
MemGetInfo
Memcpy2DToArray
ReadDevParamFromRAW
ReflectParamValues
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ