GetPluginInfo
PluginFunc
Static task
static1
Behavioral task
behavioral1
Sample
54b782e80f4b889ce3230144518d9e5f_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
54b782e80f4b889ce3230144518d9e5f_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
54b782e80f4b889ce3230144518d9e5f_JaffaCakes118
Size
80KB
MD5
54b782e80f4b889ce3230144518d9e5f
SHA1
e306dc6f937d897cde2cc1c79154a8165490469f
SHA256
bdf33cfdb557b2847e2dfeba8e111bb99ddf174d3ea028a0777341014ce58483
SHA512
c1a0841a30116f09c4d2f40038e22a90409dbd3c9cdf8a14f0bfdaf2b45677568204c20c4959dac270f035a5f7250e2c535dcd9427237a63db1f5cd92c3dea83
SSDEEP
768:/yGofPfHQSgdrClkn3qymWajoqUN6Xq7UiT9pHRrN6FV8IGub3iB9yrve2lhwxlg:6Goo+kaJboY9iTnlNA8g1nXwiokD
Checks for missing Authenticode signature.
resource |
---|
54b782e80f4b889ce3230144518d9e5f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
GetPrivateProfileStringA
SetLastError
GetTickCount
GetLastError
GetVersionExA
GetModuleFileNameA
CloseHandle
CreateFileA
LCMapStringW
LCMapStringA
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
ReadFile
FlushFileBuffers
SetStdHandle
SetFilePointer
InterlockedIncrement
InterlockedDecrement
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetProcAddress
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsFree
TlsAlloc
GetCurrentThreadId
ExitProcess
DeleteCriticalSection
InitializeCriticalSection
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
RtlUnwind
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetVersion
GetModuleHandleA
GetEnvironmentVariableA
DispatchMessageA
PeekMessageA
TranslateMessage
ioctlsocket
WSAGetLastError
htons
gethostbyname
socket
connect
__WSAFDIsSet
select
closesocket
send
recv
inet_addr
ord227
ord485
ord223
ord183
ord111
ord12
ord6
ord142
ord74
ord21
ord75
ord87
ord43
ord127
ord130
ord78
ord108
ord48
ord177
GetPluginInfo
PluginFunc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ