GetDLlVersion
Prevx1
Run
Static task
static1
Behavioral task
behavioral1
Sample
1455013e921ed1ae94e865512b2a1f88_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1455013e921ed1ae94e865512b2a1f88_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
1455013e921ed1ae94e865512b2a1f88_JaffaCakes118
Size
56KB
MD5
1455013e921ed1ae94e865512b2a1f88
SHA1
260e0c182d0746061579d68efba66ec8e6394bbc
SHA256
c4c40d673f7dc1b9b5e874bf0aeaf5ab26345036e1f8d5bb2a28e3cdb9ddff1e
SHA512
19ebe0b953693720ac5f88b6eb28209d29975d42a1c9b80cef3130bdfdc20581809bd01440de8bb07b9f656aa553a964046df8efab97d8e1e19bb4f143364eef
SSDEEP
768:2lPIMx2+aL3Bypkw80Y3hT21SUVVtqSQ4AGt/iB94sidP40zwKFJk5TsQN5kNAcA:MPIu23R0ahTKNVVtqS8GtRrWsBAcA
Checks for missing Authenticode signature.
resource |
---|
1455013e921ed1ae94e865512b2a1f88_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
TerminateProcess
GetLastError
FindClose
FindNextFileA
FindFirstFileA
GetModuleFileNameA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
CreateProcessA
SetEnvironmentVariableA
Sleep
RtlUnwind
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
FlushFileBuffers
SetStdHandle
InterlockedIncrement
InterlockedDecrement
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
CloseHandle
WriteFile
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetProcAddress
GetModuleHandleA
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetFilePointer
SendMessageA
GetWindowThreadProcessId
GetClassNameA
GetParent
CloseDesktop
SetForegroundWindow
EnumDesktopWindows
PostMessageA
CreateDesktopA
OpenDesktopA
EnumChildWindows
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
SHGetSpecialFolderPathA
WSACleanup
gethostbyname
WSAStartup
connect
setsockopt
socket
htons
send
recv
closesocket
shutdown
inet_addr
GetDLlVersion
Prevx1
Run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ