PlayWork
WORKME
Static task
static1
Behavioral task
behavioral1
Sample
0641e4bd70b8549411bcde97b49a655d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0641e4bd70b8549411bcde97b49a655d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0641e4bd70b8549411bcde97b49a655d_JaffaCakes118
Size
63KB
MD5
0641e4bd70b8549411bcde97b49a655d
SHA1
378e5b9f7798e99d95d3141824824ff5b18015b8
SHA256
2e1337328af13b8c6fec05f15a5dcf554faafb3f659d48738c38567d1b8d4207
SHA512
96fc0a6f810a6ea56b7cc6421d5835146afac3a5b74c7fd96d2a89432e8089014901c7034d2fb763c183473c97b6fe02814174a7a50e33a8a1ee3a9507820bf0
SSDEEP
768:/u+K6r+/GukFBMtyTYGE2PsC9kWEX4TjY3xdAjK6gmY2W5aKAFYidjdtMpI9t3Up:/TK61LFG9sMX4TjEuj+RnAyKzKI9t3U
Checks for missing Authenticode signature.
resource |
---|
0641e4bd70b8549411bcde97b49a655d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WaitForSingleObject
OpenMutexA
CreateDirectoryA
GetWindowsDirectoryA
OutputDebugStringA
GetFileAttributesA
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
GetProcAddress
CopyFileA
DeleteFileA
SetFileAttributesA
MoveFileExA
CreateThread
CreateEventA
FreeLibrary
ExitProcess
GetVolumeInformationA
GetComputerNameA
GetLocalTime
GetLastError
GetVersionExA
GetVersion
LCMapStringW
LCMapStringA
GetCurrentProcessId
OpenEventA
SetEvent
CloseHandle
Sleep
LoadLibraryA
ReleaseMutex
GetTickCount
GlobalMemoryStatus
CreateMutexA
ReadFile
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
GetSystemInfo
GetSystemDirectoryA
MultiByteToWideChar
RtlUnwind
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
HeapFree
HeapAlloc
GetCommandLineA
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
WriteFile
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
TlsFree
SetLastError
UnhandledExceptionFilter
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
SetFilePointer
InterlockedDecrement
InterlockedIncrement
CreateFileA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SendMessageA
CallNextHookEx
SetWindowsHookExA
wsprintfA
GetClassNameA
GetWindowTextA
GetKeyNameTextA
wvsprintfA
IsWindow
UnhookWindowsHookEx
FindWindowA
GetUserNameA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ImmGetCompositionStringA
ImmReleaseContext
ImmGetContext
InternetReadFile
InternetOpenUrlA
InternetOpenA
HttpQueryInfoA
InternetSetOptionA
InternetCloseHandle
capCreateCaptureWindowA
URLDownloadToFileA
PlayWork
WORKME
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ