GetCoreVersion
Run
StopRun
Static task
static1
Behavioral task
behavioral1
Sample
3d4ac36ee603afa26a63ef6ed9a5a4ae_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3d4ac36ee603afa26a63ef6ed9a5a4ae_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3d4ac36ee603afa26a63ef6ed9a5a4ae_JaffaCakes118
Size
64KB
MD5
3d4ac36ee603afa26a63ef6ed9a5a4ae
SHA1
4eec131d6dd746126af86c583f5867bb0038ff57
SHA256
e1eefb74be74ac192a14269dd0c7c7666470b0d61ae86fc096a7411bdc209b85
SHA512
63a352d53fd3a5f00a0c98f7ee15c6f1245593ef8327bd6547ef85dc36ff49a6ee4872bd5336656a99232922aceb1e97e0e8e1429938dea7b3142a91672e17d1
SSDEEP
1536:gxQwS1eYOOWxYDvTxPoxw+ubnU2l+2NK:gxQHADKqxUnU2lT
Checks for missing Authenticode signature.
resource |
---|
3d4ac36ee603afa26a63ef6ed9a5a4ae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
CreateProcessA
GetSystemDirectoryA
GetVolumeInformationA
GetComputerNameA
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryA
DeleteFileA
GetWindowsDirectoryA
TerminateThread
WaitForSingleObject
CreateThread
GetLocalTime
FindClose
FindNextFileA
FindFirstFileA
LCMapStringW
LCMapStringA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
CloseHandle
WriteFile
ReadFile
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetFilePointer
InterlockedDecrement
InterlockedIncrement
SetStdHandle
FlushFileBuffers
CreateFileA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SHGetSpecialFolderPathA
gethostbyname
inet_addr
shutdown
closesocket
recv
WSACleanup
htons
socket
setsockopt
connect
WSAStartup
WSAGetLastError
send
GetCoreVersion
Run
StopRun
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ