EsdCreateUpdateClass
EsdDestroyUpdateClass
Static task
static1
Behavioral task
behavioral1
Sample
30362190f678a6798188db5e9cc6e7a4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30362190f678a6798188db5e9cc6e7a4_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
30362190f678a6798188db5e9cc6e7a4_JaffaCakes118
Size
140KB
MD5
30362190f678a6798188db5e9cc6e7a4
SHA1
3784f9444b56ddb48122f47054e457011ed080ed
SHA256
b282cdf38614d9c731d0325562796591228cf1a97975627ba0ebe0f42cb6c8b0
SHA512
a8fef877c020896487dcc9bc42eddafc38c3516c8654bbd788d54ee0aa0d39f388bc3b0bd9fccb5872c58e353c438245a24dd8da6d089cca5b377ce2739fc8aa
SSDEEP
3072:zeELh1wFQsBRgJpobPMySKgl+1tg3c68:9wFB9PMp/l+1tgs
Checks for missing Authenticode signature.
resource |
---|
30362190f678a6798188db5e9cc6e7a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
FreeLibrary
GetModuleHandleA
CloseHandle
OpenProcess
GetProcAddress
DeleteFileA
SetLastError
GetVersionExA
GetPrivateProfileStringA
CreateFileA
GetPrivateProfileSectionA
SetCurrentDirectoryA
CreateDirectoryA
GetCurrentDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
CreateProcessA
WritePrivateProfileStringA
GetLastError
CompareStringW
CompareStringA
FlushFileBuffers
ReadFile
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetTimeZoneInformation
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
HeapAlloc
InterlockedDecrement
InterlockedIncrement
HeapFree
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
GetACP
GetOEMCP
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetFilePointer
SetEnvironmentVariableA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
InternetGetConnectedState
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
PathUnquoteSpacesA
EsdCreateUpdateClass
EsdDestroyUpdateClass
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ