WEP
ZDataCompress
ZDataDecompress
ZDataEnd
ZDataGetLastError
ZDataSetInfo
ZDataSetup
ZDataStart
ZDataUnSetup
Static task
static1
Behavioral task
behavioral1
Sample
f56ee7c6dd8fa3b95c6e05abcbfcb64b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f56ee7c6dd8fa3b95c6e05abcbfcb64b_JaffaCakes118
Size
166KB
MD5
f56ee7c6dd8fa3b95c6e05abcbfcb64b
SHA1
4ea6c62c91c914edf676dfe3ff0294b7731d94ee
SHA256
eb2d8e17caa0e0c597305e1c4558a17b6e9f72cb94307527acf14de0f9b57bcb
SHA512
99c655ca267cfe9dfc9658e06a39e7f9ed6edf70d121121a1ef148484fd1aea49119501fa575e8fe03796972ea9a572e9ad61f7dd1709386140f8f97cd0fce50
SSDEEP
3072:v3GpfiZalDxWcAPQb9Dg3Seq+i3x2PHTyPmTTkTBCltl:vAqZ+Dx8PQb9wq+isHTGmTT6Cltl
Checks for missing Authenticode signature.
resource |
---|
f56ee7c6dd8fa3b95c6e05abcbfcb64b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetStdHandle
HeapFree
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
HeapAlloc
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer
WEP
ZDataCompress
ZDataDecompress
ZDataEnd
ZDataGetLastError
ZDataSetInfo
ZDataSetup
ZDataStart
ZDataUnSetup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE