GetHash
SetAccessPriv
Static task
static1
Behavioral task
behavioral1
Sample
300598915cfe2422acd478969b0465b3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
300598915cfe2422acd478969b0465b3_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
300598915cfe2422acd478969b0465b3_JaffaCakes118
Size
67KB
MD5
300598915cfe2422acd478969b0465b3
SHA1
992330d8b0496b38b10001c34a81aaa3d248853c
SHA256
d820d2774e22e96492b72501ff096e4a70239d05bdbba5e4daae23918e88dbea
SHA512
ee68fc5a03af719fd953e653c59a7ac994c7b50fced279040ddaaf82da6f86797a74c67cb8de8155e5e073563c5bd592673258f1c873f8cc387f531ad4a4b027
SSDEEP
1536:DZgD06kk3PAT8nQuQ+cJNJdtCW1Gr78IWWrN+MLalOsk5laI:DZgY6k8AAQuQ+cJNJdOUt9vlOsk5lH
Checks for missing Authenticode signature.
resource |
---|
300598915cfe2422acd478969b0465b3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FreeLibrary
CloseHandle
LocalFree
MultiByteToWideChar
LoadLibraryA
GetCurrentProcess
WriteFile
FlushFileBuffers
DisconnectNamedPipe
ConnectNamedPipe
GetLastError
GetProcAddress
CreateNamedPipeA
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
RtlUnwindEx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
HeapReAlloc
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CreateFileA
LookupPrivilegeValueA
AdjustTokenPrivileges
LsaOpenPolicy
LsaQueryInformationPolicy
LsaClose
OpenProcessToken
GetHash
SetAccessPriv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ