Install
Uninstall
Static task
static1
Behavioral task
behavioral1
Sample
06a80fb3913d3f21185592fe5b65a700_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
06a80fb3913d3f21185592fe5b65a700_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
06a80fb3913d3f21185592fe5b65a700_JaffaCakes118
Size
27KB
MD5
06a80fb3913d3f21185592fe5b65a700
SHA1
46e0e63c17e89066bf28ad87184b8cd6f681ec81
SHA256
6bf3839ffc2e77a3e288203322b363680fa860202d78a272ddada4f487334e6d
SHA512
ad58d47c2eb18869e44c38052439670b6c19bb8e7d5874b595bde6b73485650de6f7dc7077df5904179800c8cc9f51b01a25a45861185ffd3b36ed6a869ff73e
SSDEEP
384:idw6HpDXeUSfy15JjSw8ZcoiVyvYwFXq2X6qgRSlyroM063gttxLZ:rYzsCdSFclVg1q2KqgclZFPtt/
Checks for missing Authenticode signature.
resource |
---|
06a80fb3913d3f21185592fe5b65a700_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTempPathA
CloseHandle
GetFileAttributesW
ReadProcessMemory
VirtualQueryEx
WideCharToMultiByte
ReadFile
GetFileSize
CreateFileA
Thread32Next
TerminateThread
Thread32First
CreateToolhelp32Snapshot
SetFilePointer
HeapAlloc
GetProcAddress
DeleteFileA
GetLastError
FindClose
FindFirstFileA
FreeLibrary
GetPrivateProfileStringA
OpenProcess
TerminateProcess
GetCurrentProcess
GetCurrentProcessId
Sleep
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
CreateThread
GetProcessHeap
LoadLibraryA
GetDC
GetWindowRect
UnhookWindowsHookEx
SetWindowsHookExA
GetClassNameW
wsprintfA
GetWindowThreadProcessId
GetForegroundWindow
GetWindowTextA
GetWindow
CallNextHookEx
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
_local_unwind2
_strcmpi
_strupr
tolower
_vsnprintf
free
strcpy
memset
malloc
sprintf
??3@YAXPAX@Z
wcscmp
??2@YAPAXI@Z
fclose
ftell
fseek
fopen
mbstowcs
rand
srand
time
wcslen
strstr
wcsncat
wcscpy
wcsstr
strncpy
exit
memcpy
_except_handler3
strrchr
strlen
InternetCloseHandle
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
CreateDCA
DeleteObject
Install
Uninstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ