?abs32@@YAHXZ
DllRegisterServer
PluginInit
Static task
static1
Behavioral task
behavioral1
Sample
dll64.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dll64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
svchost.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
svchost.exe
Resource
win10v2004-20241007-en
Target
JaffaCakes118_831a54f66b7645119d642dab565d86f4316752f6f2f759f9cc10737a34032ebf
Size
621KB
MD5
96be737bf47ac991c0dc9be996e0f10b
SHA1
2739c52ce389aad8214224617a04e5b494c410b3
SHA256
831a54f66b7645119d642dab565d86f4316752f6f2f759f9cc10737a34032ebf
SHA512
20675f2b1a9cd1fd091a48b535d8f37e42001fce393d1d180f21017ce4b1f999f3488d8da1985d641ff838716124f51cfb1adadb727c4740199babe7d9481711
SSDEEP
12288:IEL5jUeK/mKz5U584IsTcmMcuWeshJuNrLtVEAcNYqky:I9/z5UOl0cNR8JuNftXRy
Checks for missing Authenticode signature.
resource |
---|
unpack001/dll64.dll |
unpack001/svchost.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
?abs32@@YAHXZ
DllRegisterServer
PluginInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RemoveVectoredExceptionHandler
OpenFile
EnumDateFormatsExW
GetModuleHandleExA
WriteConsoleOutputCharacterA
LoadResource
LoadLibraryExW
GetCurrentProcess
InitializeSListHead
HeapFree
GlobalLock
CancelWaitableTimer
GetModuleHandleW
GetConsoleAliasesA
SetFileTime
GetCompressedFileSizeW
TzSpecificLocalTimeToSystemTime
FindResourceExA
GlobalAlloc
GlobalFindAtomA
GetLocaleInfoW
GetSystemPowerStatus
GetSystemTimeAdjustment
HeapReAlloc
GetFileAttributesW
GetTimeZoneInformation
CompareStringW
DisconnectNamedPipe
CreateJobObjectA
SetLastError
GetProcAddress
GlobalFree
GetTempFileNameA
GetLocalTime
GetAtomNameA
OpenWaitableTimerW
AddAtomW
VirtualLock
SetCommMask
GlobalWire
lstrcatW
FatalExit
GetCurrentDirectoryA
GetConsoleCursorInfo
EnumCalendarInfoExA
LCMapStringW
Beep
GetEnvironmentVariableW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
DeleteCriticalSection
FatalAppExitA
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
CloseHandle
CreateFileA
InitializeCriticalSectionAndSpinCount
HeapSize
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
ReadFile
SetEndOfFile
GetProcessHeap
CompareStringA
SetEnvironmentVariableA
GetModuleHandleA
RegCreateKeyA
Batman
Candies
Fobos
OneMore
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ