ConvertToDCFeX3
CreateFileSystemContainer
CreateIsoTrack
EnumVolumeRelease
MallocArray
MemcpyArrayToArray
RegisterFunction
Static task
static1
Behavioral task
behavioral1
Sample
ebc51f5ebec32deecca4c72c23523078_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ebc51f5ebec32deecca4c72c23523078_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ebc51f5ebec32deecca4c72c23523078_JaffaCakes118
Size
364KB
MD5
ebc51f5ebec32deecca4c72c23523078
SHA1
878a2981cafd1fa07129651213b237d2fca9000d
SHA256
894e8f7c54084d102c469f0037e52f806ac70a1293fbaef012e76829dce46996
SHA512
dcd372ede17f99fce60352698e8576e3a4eca4613e157839dc69dd86f367b185b441be9fd148ae7926c6082e153e526bca908d55419addde2665734586420fbc
SSDEEP
6144:o46/BCFwm6gn53MwwFthgshAjQ0ex+63Q/XR3jO0RryUpmbiGvDCxfd+YIdOTVG3:o4IkX58TzvhEVRMv7Sw935JP9lIZy
Checks for missing Authenticode signature.
resource |
---|
ebc51f5ebec32deecca4c72c23523078_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHGetFolderPathA
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryA
GetSystemDefaultLangID
GetFileSize
DeleteFileA
GetVersion
lstrcatA
GetLastError
SetFileAttributesA
CreateDirectoryA
GetFileAttributesA
lstrlenA
MultiByteToWideChar
GetUserDefaultLangID
GetLocaleInfoA
GetModuleFileNameA
LoadLibraryA
LockResource
LoadResource
FindResourceA
FreeLibrary
GetProcAddress
GetCurrentProcess
LocalFree
LocalAlloc
GetVersionExA
IsBadWritePtr
GetCurrentThread
CloseHandle
ReadFile
CreateFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount
GetModuleHandleA
GlobalMemoryStatus
Sleep
lstrlenW
WaitForSingleObject
CreateEventA
DeviceIoControl
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
RaiseException
GetCommandLineA
GetDriveTypeA
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
ExitProcess
FatalAppExitA
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
HeapSize
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetFullPathNameA
VirtualAlloc
GetStringTypeA
GetStringTypeW
SetFilePointer
FlushFileBuffers
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
IsBadReadPtr
IsBadCodePtr
UnhandledExceptionFilter
SetStdHandle
SetConsoleCtrlHandler
SetEndOfFile
GetLocaleInfoW
SetEnvironmentVariableA
FormatMessageA
RtlUnwind
MessageBoxA
LoadStringA
SysAllocString
SysAllocStringLen
SysFreeString
AllocateAndInitializeSid
SetEntriesInAclA
RegEnumKeyExA
RegEnumValueA
RevertToSelf
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
AddAccessAllowedAce
InitializeAcl
GetLengthSid
OpenProcessToken
OpenThreadToken
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
ImpersonateSelf
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
RegDeleteValueA
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
SHDeleteKeyA
ConvertToDCFeX3
CreateFileSystemContainer
CreateIsoTrack
EnumVolumeRelease
MallocArray
MemcpyArrayToArray
RegisterFunction
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ