WHInit
WHUninit
Static task
static1
Behavioral task
behavioral1
Sample
42053d87027514e8abb0e229a085d236_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
42053d87027514e8abb0e229a085d236_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
42053d87027514e8abb0e229a085d236_JaffaCakes118
Size
164KB
MD5
42053d87027514e8abb0e229a085d236
SHA1
d0f1d6c3de85518272ca6194e73a1f8116b6c73d
SHA256
d2f9a45a68bdaea3bae5a01bb26cc80378bbff205f9144c34b89bad106b31a71
SHA512
36c281f8d5001b26b6a22e3656609e3a0703da6e30cd05cd6daa7beb1f5851243367b7af74efc84e4255609e40a91abfd5afd3cea5c1497873c3ae53e0590219
SSDEEP
3072:F/sr9zLY7qc9NAJuCdSfvuwev2qlcTgtqaozi:kVVcQsCd8WD2q0jvO
Checks for missing Authenticode signature.
resource |
---|
42053d87027514e8abb0e229a085d236_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnumProcesses
GetModuleBaseNameA
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
Netbios
GetStringTypeW
GetStringTypeA
WriteConsoleW
MultiByteToWideChar
CreateProcessA
FreeEnvironmentStringsA
lstrcpyA
lstrlenA
GetEnvironmentStrings
lstrcmpA
GetLastError
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WriteFile
ReadFile
CreateFileA
GetFileSize
OpenFile
GetPrivateProfileIntA
GetWindowsDirectoryA
WritePrivateProfileStringA
GetLocalTime
GetPrivateProfileStringA
SetEndOfFile
SetFilePointer
lstrcatA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcess
OpenMutexA
WaitForSingleObject
ReleaseMutex
LocalFree
OpenProcess
Module32Next
Module32First
CreateToolhelp32Snapshot
CreateThread
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
GetEnvironmentVariableA
WideCharToMultiByte
lstrlenW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
Sleep
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
CreateMutexA
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
ExitProcess
HeapCreate
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapAlloc
HeapFree
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
VirtualFree
HeapReAlloc
HeapDestroy
SendMessageTimeoutA
GetSystemMetrics
GetParent
SetPropA
GetPropA
CallWindowProcA
SetWindowLongA
RegisterWindowMessageA
DispatchMessageA
TranslateMessage
SetTimer
KillTimer
GetAncestor
GetClassNameA
wsprintfA
PostThreadMessageA
SetWindowPos
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetMessageA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorA
CoCreateInstance
CoInitialize
SysAllocStringLen
VariantClear
VariantInit
SysFreeString
SysAllocString
VarCmp
WHInit
WHUninit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ