AddRegKey
Check
KeyCrypt
KeyDecrypt
LoadDll
Lock
UnLock
UnloadDll
Static task
static1
Behavioral task
behavioral1
Sample
568c78dba312978c890eb8ef7d6ab7e7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
568c78dba312978c890eb8ef7d6ab7e7_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
568c78dba312978c890eb8ef7d6ab7e7_JaffaCakes118
Size
244KB
MD5
568c78dba312978c890eb8ef7d6ab7e7
SHA1
7c7f7de90590dbad56a33e046c95d89b671ca9d5
SHA256
66ecfe7104bc5c64845f72ec2d610eb47865bf85ac4a69d0bdbc00ada858516e
SHA512
1323ddbf3dcc48cc14abd307bea822ee0f06f4482223de01607a4f7bec44d8b6e988171d9d6434987a3c9dd3cd9d637254aec73ee1d2cf5396ae12f31676ca32
SSDEEP
3072:jfVoc041+WwB4MToAR5ajTI6UTN9RMu/ze27o3oSoWwTV+tZJ3r8w0og1:LmcB1+WO4MToAjajYbx/zeL3Z78wA1
Checks for missing Authenticode signature.
resource |
---|
568c78dba312978c890eb8ef7d6ab7e7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteCriticalSection
RtlUnwind
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
GetCommandLineA
GetVersion
IsBadWritePtr
IsBadReadPtr
HeapValidate
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetLastError
CloseHandle
InitializeCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
SetConsoleCtrlHandler
SetHandleCount
GetFileType
GetStartupInfoA
lstrlenA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FatalAppExitA
HeapAlloc
HeapReAlloc
VirtualAlloc
SetUnhandledExceptionFilter
SetStdHandle
FlushFileBuffers
CreateFileA
IsBadCodePtr
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetFilePointer
SetEndOfFile
ReadFile
Sleep
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
AddRegKey
Check
KeyCrypt
KeyDecrypt
LoadDll
Lock
UnLock
UnloadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ