InternalSetIpForwardEntry
RestoreMediaSense
CreateProcessNotify
esenkrnl
GetUdpTable
UnenableRouter
GetOwnerModuleFromUdp6Entry
SendARP
CreateProxyArpEntry
GetIpErrorString
InternalSetIpNetEntry
CreateIpNetEntry
Static task
static1
Behavioral task
behavioral1
Sample
ef58cc9141cc128781fe2e618f61dc40_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ef58cc9141cc128781fe2e618f61dc40_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
ef58cc9141cc128781fe2e618f61dc40_JaffaCakes118
Size
46KB
MD5
ef58cc9141cc128781fe2e618f61dc40
SHA1
af1a85ad1facac347c7cc2744fccbb8204f8a795
SHA256
03aadbf73261afa4a23bec3d0d4c61614487bfbe3bfea2371e7c6d37bd1032db
SHA512
9a688d5fbc75976ca1b29c51acbe2170aab44ff53cecf69cef24d9e76e594e601a818c9dcbaddf7e43fe97bf558a621648a5c6329124f12a31bbbc64be72b18b
SSDEEP
768:19rem2vmxFwI7vdm6T3ZbGHIsiUSFtL/FM18cTYcLH2TC+qnggF1sfRaH3X6:h2qwovdma3ZbN5UShM18cMKH/+qngW40
Checks for missing Authenticode signature.
resource |
---|
ef58cc9141cc128781fe2e618f61dc40_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CreateRectRgn
GetTextColor
GetBkColor
GetClientRect
GetWindowRect
EnableWindow
GetSystemMetrics
GetForegroundWindow
GetDesktopWindow
PostMessageA
GetDC
GetSystemMenu
RevokeDragDrop
VirtualAlloc
GetUserDefaultLCID
DuplicateHandle
UnhandledExceptionFilter
GetACP
CloseHandle
GetStringTypeW
EnterCriticalSection
GetOEMCP
InterlockedDecrement
GetModuleHandleA
GetModuleHandleA
LoadResource
GetEnvironmentStrings
SHGetMalloc
GetCatalogObject
OpenComponentLibraryOnStreamEx
CLSIDFromStringByBitness
SetupSave
ZwQuerySystemEnvironmentValueEx
ZwQueryPerformanceCounter
ZwQueryOpenSubKeys
NtCreateTimer
ZwQueryKey
ZwClose
NtIsProcessInJob
PropertySheetA
ImageList_EndDrag
InternalSetIpForwardEntry
RestoreMediaSense
CreateProcessNotify
esenkrnl
GetUdpTable
UnenableRouter
GetOwnerModuleFromUdp6Entry
SendARP
CreateProxyArpEntry
GetIpErrorString
InternalSetIpNetEntry
CreateIpNetEntry
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ