BAOCloseFile
CreateRAWObject
EventCreate
Static task
static1
Behavioral task
behavioral1
Sample
fef950835022d22bc12d3975f330d2ec_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fef950835022d22bc12d3975f330d2ec_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fef950835022d22bc12d3975f330d2ec_JaffaCakes118
Size
355KB
MD5
fef950835022d22bc12d3975f330d2ec
SHA1
c51c01ef8dd6b4966e3e515250cc55e292a2ba43
SHA256
b264b536a69e7526123e71032eb525c86840f982f53565822b408177e5a451fa
SHA512
bd856d347e0da521b90ff1546c96e6b920bfb8109fb7a604894723dfa429a1819d5e0682853c01ff0a8da89c5a324f12809905081ea78f560f5c18f0c4ad8814
SSDEEP
6144:8F2C0ENklj8hbjDXOwASLAa8+TlwgRmDMIZHTEGkYIG7Jk3w7iHo9mgfeo/l:8F2Nla7+Y7NwnDMIfVIAUgfe
Checks for missing Authenticode signature.
resource |
---|
fef950835022d22bc12d3975f330d2ec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHGetFolderPathA
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryA
GetSystemDefaultLangID
GetFileSize
DeleteFileA
GetVersion
lstrcatA
GetLastError
SetFileAttributesA
CreateDirectoryA
GetFileAttributesA
lstrlenA
MultiByteToWideChar
GetUserDefaultLangID
GetLocaleInfoA
GetModuleFileNameA
LoadLibraryA
LockResource
LoadResource
FindResourceA
FreeLibrary
GetProcAddress
GetCurrentProcess
LocalFree
LocalAlloc
GetVersionExA
IsBadWritePtr
GetCurrentThread
CloseHandle
ReadFile
CreateFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount
GetModuleHandleA
GlobalMemoryStatus
lstrlenW
WaitForSingleObject
CreateEventA
DeviceIoControl
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
RaiseException
GetCommandLineA
GetDriveTypeA
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
ExitProcess
FatalAppExitA
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
HeapSize
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetFullPathNameA
VirtualAlloc
GetStringTypeA
GetStringTypeW
SetFilePointer
FlushFileBuffers
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
IsBadReadPtr
IsBadCodePtr
UnhandledExceptionFilter
SetStdHandle
SetConsoleCtrlHandler
SetEndOfFile
GetLocaleInfoW
SetEnvironmentVariableA
FormatMessageA
RtlUnwind
MessageBoxA
LoadStringA
SysAllocString
SysAllocStringLen
SysFreeString
AllocateAndInitializeSid
SetEntriesInAclA
RegEnumKeyExA
RegEnumValueA
RevertToSelf
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
AddAccessAllowedAce
InitializeAcl
GetLengthSid
OpenProcessToken
OpenThreadToken
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
ImpersonateSelf
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
RegDeleteValueA
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
SHDeleteKeyA
BAOCloseFile
CreateRAWObject
EventCreate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ