MekeScript1
MekeScript2
MekeScript3
MekeScript4
MekeScript5
MekeScript6
MekeScript7
MekeScript8
ServerSetup
Static task
static1
Behavioral task
behavioral1
Sample
40d1d87f2afd19a4abd4625819c13ff3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
40d1d87f2afd19a4abd4625819c13ff3_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
40d1d87f2afd19a4abd4625819c13ff3_JaffaCakes118
Size
76KB
MD5
40d1d87f2afd19a4abd4625819c13ff3
SHA1
328b3c9687998ab35bb9e934949c6d5878aff622
SHA256
0e329a417dce7ebc25d4c0286e91f28cbaf883668a1b71a77ee101be4a57c8a6
SHA512
a156366cbee7de1fbe13b1547dc2cd729ab8d5339b81671921eb04ee3c3984b74f40dde27feb9884102be0316d8308143557cf1c053560949fd9bf42ec3816c1
SSDEEP
1536:/pW+hfv2nqLsso3rWrAjTEdlPFvQIGHTTqxoy+WnrRVW3jLEs7:hNJv2nEuCbrK/qxoy+yV8Es
Checks for missing Authenticode signature.
resource |
---|
40d1d87f2afd19a4abd4625819c13ff3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
WaitForSingleObject
GetLastError
GetVersion
MultiByteToWideChar
SetEnvironmentVariableA
CompareStringW
CompareStringA
ReleaseMutex
CreateMutexA
OpenMutexA
GetFileAttributesA
CreateFileA
WriteFile
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
CloseHandle
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RaiseException
GetCommandLineA
HeapAlloc
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
LCMapStringA
LCMapStringW
FlushFileBuffers
wsprintfA
StgCreateDocfile
StgOpenStorage
ControlService
StartServiceA
OpenServiceA
DeleteService
CreateServiceA
CloseServiceHandle
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerA
MekeScript1
MekeScript2
MekeScript3
MekeScript4
MekeScript5
MekeScript6
MekeScript7
MekeScript8
ServerSetup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ