CoreMain
RemoteExecuteExtern
RemoteExecuteNormal
Static task
static1
Behavioral task
behavioral1
Sample
f10d3914053e12a42711689f3e821c86_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f10d3914053e12a42711689f3e821c86_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f10d3914053e12a42711689f3e821c86_JaffaCakes118
Size
39KB
MD5
f10d3914053e12a42711689f3e821c86
SHA1
91cf71328e6bfdfd9b0644b0de58e645f9056173
SHA256
12ac15da5f04f1ee685f86a9d53d3beb541a4b36a3e3542c6fd9ec6943ed8c20
SHA512
1a0f4e4bb872fc753586f0973edd941821101b5d818edb846fbe1cbfa3a38eed46e4013574fbb463833107fcfdf390002dfdf4cb4c1dc49e7ea0ddbf25e673f9
SSDEEP
192:cMNASIfuCtrey+Am5lYRb1GMlkgnG67Wy7MBBjs0lB0l:cMuJfuCgyhMyk07WT3js0lB0l
Checks for missing Authenticode signature.
resource |
---|
f10d3914053e12a42711689f3e821c86_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
lstrlenA
GetTempPathA
ExitProcess
GetLastError
CreateMutexA
SetFilePointer
GetFileSize
ReadFile
GetCurrentProcess
ResumeThread
SetThreadContext
FlushInstructionCache
GetPrivateProfileStringA
WriteProcessMemory
GetThreadContext
SuspendThread
TerminateProcess
LoadLibraryA
GetProcAddress
lstrcpyA
GetModuleFileNameA
WaitForSingleObject
Sleep
GetLocalTime
CreateThread
GetPrivateProfileIntA
lstrcmpiA
GetStartupInfoA
CreateProcessA
CreateFileA
CloseHandle
DeleteFileA
VirtualProtectEx
WriteFile
wsprintfA
LookupPrivilegeValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
OpenProcessToken
AdjustTokenPrivileges
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetOpenA
InternetGetConnectedState
??3@YAXPAX@Z
_adjust_fdiv
malloc
_initterm
free
??2@YAPAXI@Z
CoreMain
RemoteExecuteExtern
RemoteExecuteNormal
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ