CallMethod
FileEx
IncrementalEncoder
MemoryError
String_Size
Static task
static1
Behavioral task
behavioral1
Sample
0249e68ed41a3106a5e37fe1a45b3e1d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0249e68ed41a3106a5e37fe1a45b3e1d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0249e68ed41a3106a5e37fe1a45b3e1d_JaffaCakes118
Size
436KB
MD5
0249e68ed41a3106a5e37fe1a45b3e1d
SHA1
5a51729058961599ce59ce91b07f7cdcdc43d481
SHA256
9c5ce68188031e6f9ab01df6a65aab4588d4de7d1f3413e5ea23eecc9733e3b4
SHA512
046b51cc7f49942da9ce98ccafbf54886531a205666d0f2a890213b10c0b17f4ed0102a10f7eba69e26f604729c4fe96a7c5790f4a69e38866b87a80734a9dd6
SSDEEP
6144:mHJuAyzkSaNcgwX3+SWsp70/YT96D00aBpC032Z/gfYllX7clf2O2qEEQ0G0x4vj:8yzkSF3X3hWsuNcCMRS5clf2OqETza
Checks for missing Authenticode signature.
resource |
---|
0249e68ed41a3106a5e37fe1a45b3e1d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strstr
strncpy
strcspn
sqrt
sprintf
getchar
exp
exit
_strupr
_strnicmp
_setmbcp
_scalb
_onexit
_initterm
_exit
_except_handler3
_controlfp
_cexit
_c_exit
_adjust_fdiv
__setusermatherr
__set_app_type
__p__fmode
__p__commode
__p__amblksiz
__p___wargv
__getmainargs
__dllonexit
__CxxFrameHandler
_XcptFilter
_CIexp
VirtualAlloc
VerSetConditionMask
UnhandledExceptionFilter
TerminateProcess
Sleep
lstrlenA
WaitForSingleObject
CloseHandle
ContinueDebugEvent
CopyFileA
CreateProcessA
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommConfig
GetCommState
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetSystemDirectoryA
GetTickCount
GetVersionExA
GetWindowsDirectoryA
Heap32First
LoadLibraryA
LoadModule
LocalFileTimeToFileTime
QueryPerformanceCounter
ReadFile
SetUnhandledExceptionFilter
SetTapePosition
SetLastError
SetThreadToken
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
QueryServiceStatus
OpenServiceA
OpenProcessToken
NotifyBootConfigStatus
LsaGetSystemAccessAccount
LsaCreateTrustedDomain
LookupPrivilegeValueA
GetTokenInformation
GetSidLengthRequired
GetSidIdentifierAuthority
EqualSid
DestroyPrivateObjectSecurity
CryptGetUserKey
ControlService
AllocateAndInitializeSid
AddAuditAccessAceEx
SystemFunction030
SystemFunction001
SHGetFolderPathW
SHCreateProcessAsUserW
AdjustWindowRect
BlockInput
CheckRadioButton
DispatchMessageA
DrawIcon
EnableWindow
EnumThreadWindows
EnumWindows
ExcludeUpdateRgn
ExitWindowsEx
FillRect
FrameRect
GetWindowRect
IsWindow
LoadIconA
MessageBoxA
PeekMessageA
PostMessageA
PtInRect
ScrollWindowEx
SendMessageA
SetForegroundWindow
SetThreadDesktop
ShowScrollBar
TranslateMessage
CallMethod
FileEx
IncrementalEncoder
MemoryError
String_Size
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ