NSGetModule
NSModule
Static task
static1
Behavioral task
behavioral1
Sample
e1794e86fbf3e10c44e3abdf8dae639d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1794e86fbf3e10c44e3abdf8dae639d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e1794e86fbf3e10c44e3abdf8dae639d_JaffaCakes118
Size
2.1MB
MD5
e1794e86fbf3e10c44e3abdf8dae639d
SHA1
50529f0511cac9f4f7f7f86c92599944eeaa8823
SHA256
1d64be11fdf6eb1332d31f0df37e0fbffc31f4be0ace4763689c530108a6dde8
SHA512
5f3e4a5d1fccadf64cfbb89d92644e42152f2516039c1ef27f9efa2917aab8b9d06f2c0e81ed73eb1a97df7a0032077d5cac3d572f5c953c725eb21398e107c7
SSDEEP
49152:hiTBPhtD0yGKBmXGeeKaTJUm49njAPNL:atD0tKBeT
Checks for missing Authenticode signature.
resource |
---|
e1794e86fbf3e10c44e3abdf8dae639d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryA
SetEnvironmentVariableA
GetLocaleInfoW
SetEndOfFile
CreateFileA
GetCurrentDirectoryW
CreateFileW
SetStdHandle
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
ReadFile
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
FreeLibrary
LoadLibraryW
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
RaiseException
HeapFree
GetLastError
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetDriveTypeW
FindFirstFileW
HeapAlloc
HeapReAlloc
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
CloseHandle
SetFilePointer
FlushFileBuffers
UnhandledExceptionFilter
GetFullPathNameA
GetCurrentDirectoryA
GetFullPathNameW
IsWindow
SetWindowLongW
IsWindowVisible
NS_StringContainerFinish
NS_StringContainerInit
NS_StringContainerInit2
NS_CStringGetData
NS_CStringContainerFinish
NS_CStringSetData
NS_CStringContainerInit
NS_Free
NS_StringGetData
NS_Alloc
NS_GetServiceManager
NS_GetComponentManager
PR_AtomicDecrement
PR_AtomicIncrement
SysFreeString
VariantClear
SysAllocString
NSGetModule
NSModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ