DeinitServerExtension
InitServerExtension
_ReflectiveLoader@0
Static task
static1
Behavioral task
behavioral1
Sample
44ab5fc06b5cb0a139cd3e927620c11a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
44ab5fc06b5cb0a139cd3e927620c11a_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
44ab5fc06b5cb0a139cd3e927620c11a_JaffaCakes118
Size
296KB
MD5
44ab5fc06b5cb0a139cd3e927620c11a
SHA1
7f4cb30cb6e1fa7215ec347b57c1ef8f5eac426a
SHA256
79fe2a4198c5fd0b25ef5a84548fc2243a333de086d22b5dbf38d993ad15e554
SHA512
5174ed01ae0efdc4e601c6831aa69181937967fd8d3282f8fc3343856faf6499229b0d115c6194bfa689e714a4abe16e940dbceb096a6ae5735bb65f664ad632
SSDEEP
3072:gELhOSG4Jrl/QtjYq1bflWTI5biaJHUx8HP5ozQ2Gc/vYeMru6Q1bdZjgYwOyK/P:gwnrdAYq1DlWTGKGaKu6ejpOXg42Zwt
Checks for missing Authenticode signature.
resource |
---|
44ab5fc06b5cb0a139cd3e927620c11a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ntohs
getpeername
htonl
ResetEvent
DeviceIoControl
SetEvent
WaitForMultipleObjects
ReleaseSemaphore
CreateSemaphoreA
Sleep
InitializeCriticalSection
WaitForSingleObjectEx
TerminateThread
CreateThread
SetThreadPriority
GetCurrentProcess
GetCurrentThreadId
GetVersionExA
GetSystemInfo
CompareStringW
CreateFileA
CreateFileW
GetSystemDirectoryW
DeleteFileA
GetSystemDirectoryA
lstrcmpA
VirtualAlloc
VirtualFree
CreateEventA
InterlockedIncrement
GetTickCount
GetSystemTimeAsFileTime
GetProcAddress
LoadLibraryW
FreeLibrary
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalReAlloc
SetFilePointer
SetEndOfFile
GetFileSize
ReadFile
WriteFile
HeapAlloc
HeapFree
HeapReAlloc
EnumSystemLocalesA
GetUserDefaultLCID
IsValidLocale
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetLastError
PulseEvent
CloseHandle
CreateMutexA
WaitForSingleObject
ReleaseMutex
SetUnhandledExceptionFilter
ExitProcess
ExitThread
OutputDebugStringA
FlushFileBuffers
InterlockedDecrement
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LocalAlloc
InterlockedExchange
LoadLibraryA
RaiseException
GetCommandLineA
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
CreateServiceW
ChangeServiceConfigW
QueryServiceStatus
StartServiceW
OpenServiceW
UnlockServiceDatabase
LockServiceDatabase
CloseServiceHandle
OpenSCManagerW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExA
RegQueryInfoKeyA
RegCloseKey
RegQueryValueExA
RegEnumKeyExA
QueryServiceConfigW
DeinitServerExtension
InitServerExtension
_ReflectiveLoader@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ