LinesFile
SectionDirectoryNameButIs
SectionTheIsAnOf
SignificantAlwaysSectionPreserved
SingleFileIs
SyntaxAAre
ValueA
ValueFirstTheA
Static task
static1
Behavioral task
behavioral1
Sample
53c7103e59712c6d5355761d1f6ee390_JaffaCakes118.dll
Resource
win7-20241010-en
Target
53c7103e59712c6d5355761d1f6ee390_JaffaCakes118
Size
132KB
MD5
53c7103e59712c6d5355761d1f6ee390
SHA1
9e1c8a98f64c0443ce42fa689462eaa5cbe08493
SHA256
baf9d8a088eba97cc24a80d7231b97cff0d6fe928ab3f6aa7c10b679a78fd0d7
SHA512
f4efc4da01e43653e9c83a08888d5ad3bcce9da640e34265495773509c07e5061b1e824f980e5dcba8dbb4418193543b013565a9cb755a45400f0401b243e61a
SSDEEP
1536:L6eebt6qq2YBpy8kE5i6kOcXSZo4KWmnhsrJ2lMMgdvyR9f8q+pRPbBf:LObsqfDlQk/Xko4D59yR92
Checks for missing Authenticode signature.
resource |
---|
53c7103e59712c6d5355761d1f6ee390_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileAttributesW
GlobalHandle
LocalFree
LocalAlloc
HeapAlloc
CompareStringW
GetLocalTime
GlobalMemoryStatus
GetDiskFreeSpaceA
WideCharToMultiByte
SetFilePointer
ReadFile
GetFileSize
GlobalFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
FileTimeToSystemTime
WaitForMultipleObjects
GetTickCount
GetSystemTimeAsFileTime
HeapFree
CreateFileW
WriteFile
GetTempFileNameW
GetTempPathW
RaiseException
SetEvent
ResetEvent
WaitForSingleObject
FindResourceW
LoadResource
SizeofResource
SearchPathW
FreeLibrary
GetModuleFileNameW
lstrcpynW
CloseHandle
CreateEventW
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
lstrcmpiW
DeleteCriticalSection
InitializeCriticalSection
GetLastError
lstrcpyW
lstrlenW
MultiByteToWideChar
VirtualQuery
VirtualAlloc
VirtualProtect
GlobalLock
GlobalAlloc
GetModuleHandleW
GetVersionExA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
ExitThread
IsBadReadPtr
OpenSemaphoreW
GetCurrentProcessId
OutputDebugStringA
GetModuleFileNameA
OutputDebugStringW
GetConsoleWindow
GetCurrentProcess
SetLastError
VerifyVersionInfoW
GetVolumeNameForVolumeMountPointW
UnregisterWaitEx
GlobalUnlock
FreeLibraryAndExitThread
Sleep
GetSystemDirectoryW
QueryPerformanceFrequency
GetSystemPowerStatus
GetEnvironmentStringsW
GetWindowsDirectoryW
InterlockedExchange
GetProcAddress
LoadLibraryA
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExA
RegDeleteKeyW
RegQueryValueExW
LookupPrivilegeValueW
RegCloseKey
RegDeleteValueW
OpenProcessToken
RegSetValueExW
ShellExecuteW
CoInitializeEx
CLSIDFromString
CoInitialize
CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
wcslen
wcspbrk
wcscpy
free
wcscmp
wcsncat
malloc
realloc
memset
wcsncpy
wcsncmp
wcsrchr
PathAppendW
StrCatBuffW
PathFindFileNameW
PathFindExtensionW
WriteGlobalPwrPolicy
ReadGlobalPwrPolicy
GetActivePwrScheme
EnumPwrSchemes
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiDeleteDeviceInfo
LinesFile
SectionDirectoryNameButIs
SectionTheIsAnOf
SignificantAlwaysSectionPreserved
SingleFileIs
SyntaxAAre
ValueA
ValueFirstTheA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ