mymain
nomain
Static task
static1
Behavioral task
behavioral1
Sample
fb5eb89620ac50ed5bfe011e304fe588_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb5eb89620ac50ed5bfe011e304fe588_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fb5eb89620ac50ed5bfe011e304fe588_JaffaCakes118
Size
64KB
MD5
fb5eb89620ac50ed5bfe011e304fe588
SHA1
bd8b6ad441c9ac26ff7af842d92402383355a33a
SHA256
ace555009d5dd47bb5a47f7252de5dc01e6b7d76c910c32f8a0c49236bd5c10c
SHA512
608cd1c66474a4c68f953e69261fb0a8fa830cdcabdbe3e8ecdf850c668d1ef80ab70dafce93a5e69e8a131ca03ce49bbda538571659aa9a7382da82135c8973
SSDEEP
768:t673GZYNpdisPtzziU1els/dT/6pmdLzyx6aBCRAoMRTjcfwkQkji0tosuWg0:t675i2Ys/dTipY+x6a8dYwrQktosuWg0
Checks for missing Authenticode signature.
resource |
---|
fb5eb89620ac50ed5bfe011e304fe588_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetLastError
VirtualProtect
GetCurrentThreadId
CopyFileA
GetTickCount
GetSystemDirectoryA
ReadFile
SetFilePointer
CreateFileA
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
CreateProcessA
GetWindowsDirectoryA
WideCharToMultiByte
lstrcatA
GetModuleHandleA
CreateThread
GetLastError
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetModuleFileNameA
CompareStringA
MoveFileA
Sleep
DeleteFileA
CloseHandle
LoadLibraryA
GetProcAddress
GetLocalTime
GetCPInfo
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
HeapReAlloc
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetUnhandledExceptionFilter
InterlockedDecrement
InterlockedIncrement
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
OpenWindowStationA
SetProcessWindowStation
SetWindowsHookExA
GetForegroundWindow
GetWindowTextA
MapVirtualKeyA
GetKeyboardState
ToAscii
CallNextHookEx
wsprintfA
OpenInputDesktop
GetThreadDesktop
GetUserObjectInformationA
SetThreadDesktop
CloseDesktop
GetProcessWindowStation
RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
FreeSid
RegCreateKeyA
GetProcessMemoryInfo
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
PathFileExistsA
mymain
nomain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ