Init
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Static task
static1
Behavioral task
behavioral1
Sample
3acbe7fb11093dbdbe2673e4f7268045_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3acbe7fb11093dbdbe2673e4f7268045_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3acbe7fb11093dbdbe2673e4f7268045_JaffaCakes118
Size
32KB
MD5
3acbe7fb11093dbdbe2673e4f7268045
SHA1
c86d9b90afa24aec493a84d06bf5c8d35860f9f9
SHA256
e5a2ed772294b959c0af607c629e838bb5a6561f5eb02db3e9450bcade28bdb6
SHA512
b68bdd48b6761a3f51a63e8d5c4f2286a86dff959d309631f9707483e4828d6937d9f244d02966513a71afba97267b62104963c9ab7ba433b064be6d22c87f23
SSDEEP
384:kYBS7dKMvsx3lQ4Jmz3rg6tPuDoodEpNzLPdc4BnA1oRviCkfwWU:ZMo3lQ4EbgaPioo+zLP7BA1UXkfVU
Checks for missing Authenticode signature.
resource |
---|
3acbe7fb11093dbdbe2673e4f7268045_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetModuleHandleA
ExitProcess
GetModuleFileNameA
Sleep
WaitForMultipleObjects
GetDriveTypeA
GetLogicalDriveStringsA
CloseHandle
WriteFile
GetFileSize
SetFilePointer
GetPrivateProfileStringA
GetCurrentProcessId
CreateThread
UnmapViewOfFile
MapViewOfFile
GetLastError
VirtualFree
VirtualAlloc
ReadFile
MultiByteToWideChar
WideCharToMultiByte
GlobalFree
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalSize
GetCurrentProcess
ResumeThread
SuspendThread
TerminateThread
GetWindowThreadProcessId
GetForegroundWindow
GetClassNameA
free
_ltoa
_strlwr
_strcmpi
strlen
atol
strchr
_except_handler3
strcpy
strstr
strrchr
sprintf
memcpy
memset
strcat
_strupr
realloc
wcslen
wcscmp
malloc
rand
Init
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ