GetFreeWorkzHeader
NSGetModule
OpenFreeWorkzPage
getFreeWorkzJsCode
isUrlFreeWorkzOk
Static task
static1
Behavioral task
behavioral1
Sample
12278405af1bb23e3840cfdea568e5c6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
12278405af1bb23e3840cfdea568e5c6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
12278405af1bb23e3840cfdea568e5c6_JaffaCakes118
Size
97KB
MD5
12278405af1bb23e3840cfdea568e5c6
SHA1
5860fe143d5ac8bb72c568e2cba2174f06c9920f
SHA256
c31ad80bf4545d956364381e33445ce3e0a3871a05250fddfe8cec14ca74aba2
SHA512
7ed22fd537e10d2fb3f1b141821733a2c57354ad8e8a48ee45b4acaf0eb4ad8fba086068090eed0065880928bcee407cde6de4fb2261c59245376aaa7c725266
SSDEEP
1536:MG2S3qje74SC68qZLcs20IT2XVuOYv/RYv/KTI4RfFO05j+JAu:4S6y5v7csQalpX+DZFO058Au
Checks for missing Authenticode signature.
resource |
---|
12278405af1bb23e3840cfdea568e5c6_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NS_CStringGetData
NS_Alloc
NS_StringCloneData
NS_StringContainerFinish
NS_StringContainerInit
NS_GetServiceManager
NS_StringGetData
NS_CStringContainerFinish
NS_CStringContainerInit
NS_StringSetData
NS_StringSetDataRange
NS_Free
StrStrIA
wnsprintfA
InternetCrackUrlA
InternetGetConnectedState
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
FlushFileBuffers
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
SetStdHandle
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
TerminateThread
Sleep
MultiByteToWideChar
CreateThread
GetExitCodeThread
lstrlenW
lstrlenA
HeapReAlloc
GetLastError
HeapAlloc
GetProcAddress
LoadLibraryA
HeapFree
GetProcessHeap
LocalFree
FreeLibrary
CloseHandle
GetCurrentProcess
CreateProcessA
WriteFile
CreateFileA
GetTempPathA
WaitForSingleObject
CreateMutexA
GetVolumeInformationA
SetLastError
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
WideCharToMultiByte
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
GetModuleHandleA
VirtualAlloc
EnterCriticalSection
RaiseException
RtlUnwind
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
RegSetValueExA
RegCreateKeyA
OpenProcessToken
DuplicateTokenEx
ConvertStringSidToSidW
GetLengthSid
SetTokenInformation
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegCloseKey
ShellExecuteA
SysFreeString
SysAllocStringLen
PR_AtomicDecrement
PR_AtomicIncrement
GetFreeWorkzHeader
NSGetModule
OpenFreeWorkzPage
getFreeWorkzJsCode
isUrlFreeWorkzOk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ