FromString
Number_Positive
SetFromWindowsErr
_flags
info_init
Static task
static1
Behavioral task
behavioral1
Sample
37e2edbeb45fd69bc218394386444f60_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
37e2edbeb45fd69bc218394386444f60_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
37e2edbeb45fd69bc218394386444f60_JaffaCakes118
Size
584KB
MD5
37e2edbeb45fd69bc218394386444f60
SHA1
b75762a2cede84d67de0ffc35d6740eeb2a77437
SHA256
1eba7d436d363a0736638a70adfdd66befcd90f322921b7d9a1bb23326878751
SHA512
6400b0b08dc90d2fd19c022612ed904a43a589200e7f05c54c334129aa5b2d4d02e59fdb3eca638d6898979193ac3d53de68ec696db196c6908df94e872c01bc
SSDEEP
12288:tL/jLek92b14KAwc0hkYgOIVxTHxk2+/vYybt+znGPiqy:VexBdcWkJTRk5bgGPi
Checks for missing Authenticode signature.
resource |
---|
37e2edbeb45fd69bc218394386444f60_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetExitCodeThread
GetModuleHandleA
LocalFree
InterlockedDecrement
WaitForMultipleObjects
lstrcmpiW
SetEvent
GetCurrentProcessId
InterlockedIncrement
DeleteCriticalSection
LoadResource
GetLastError
CloseHandle
LeaveCriticalSection
InterlockedCompareExchange
CreateFileW
TerminateProcess
GlobalAlloc
VirtualAlloc
GetVersionExA
LocalAlloc
CreateMutexW
DeviceIoControl
MultiByteToWideChar
CreateEventW
ReadFile
InitializeCriticalSection
lstrlenW
InterlockedExchange
WaitForSingleObject
GetModuleFileNameW
RaiseException
GetTickCount
Sleep
GetDateFormatA
ReleaseMutex
UnhandledExceptionFilter
GetCurrentThreadId
SetUnhandledExceptionFilter
GlobalFree
CreateWaitableTimerW
QueryPerformanceCounter
EnterCriticalSection
ResetEvent
GetSystemTimeAsFileTime
GetModuleHandleW
WideCharToMultiByte
FreeLibrary
GetThreadLocale
CoInitializeEx
CoCreateInstance
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoTaskMemRealloc
LoadTypeLi
SysStringLen
VarUI4FromStr
SysAllocString
SysFreeString
RegisterTypeLi
UnRegisterTypeLi
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyW
FromString
Number_Positive
SetFromWindowsErr
_flags
info_init
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ