RegWhWs2Lsp
UnregWhWs2Lsp
WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
3dab060588773175089d5f6f7395aea8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3dab060588773175089d5f6f7395aea8_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3dab060588773175089d5f6f7395aea8_JaffaCakes118
Size
40KB
MD5
3dab060588773175089d5f6f7395aea8
SHA1
05183d7de02aec0fe92fdec1743a513dad23781e
SHA256
02c58bd245412e7475a46367e9b687b6d93e8c2bf03af07a3f201addcde6ff89
SHA512
9a85d343e17c9f62118abe6aabbbc31fe41a6bc8c186996ca4833bd6b6616ebc76479b47c7bc148e4a8f8668345742c8dd36dee4f4622c7320e44165e28c3cbe
SSDEEP
384:7vCkFQwLb4i8iQVQAM7EXyhrX4hg7PXMTYjAq6xsH:7aoQq8lVc7Eihb4hg7P3+sH
Checks for missing Authenticode signature.
resource |
---|
3dab060588773175089d5f6f7395aea8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSCInstallProvider
WSCDeinstallProvider
WSCEnumProtocols
UuidCreate
ceil
_adjust_fdiv
_ftol
wcscat
wcscpy
strcat
wcsstr
memcmp
__mb_cur_max
_isctype
_pctype
atoi
sprintf
_getpid
time
strlen
strcpy
_strlwr
strstr
memset
memcpy
malloc
free
_initterm
_strnicmp
UnmapViewOfFile
CreateFileMappingA
GetLastError
MapViewOfFile
CreateEventA
CreateSemaphoreA
MultiByteToWideChar
GetWindowsDirectoryA
ExpandEnvironmentStringsW
WideCharToMultiByte
LoadLibraryA
GetProcAddress
DisableThreadLibraryCalls
InitializeCriticalSection
GetModuleFileNameA
CreateMutexA
DeleteCriticalSection
CloseHandle
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetTickCount
WaitForSingleObject
ReleaseMutex
lstrcatA
ReleaseSemaphore
lstrlenA
lstrcpyA
RegWhWs2Lsp
UnregWhWs2Lsp
WSPStartup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ