Config
Intercept
Setup
Static task
static1
Behavioral task
behavioral1
Sample
18bce039f2a4cb6c7ee23823b8781b9e_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
18bce039f2a4cb6c7ee23823b8781b9e_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
18bce039f2a4cb6c7ee23823b8781b9e_JaffaCakes118
Size
21KB
MD5
18bce039f2a4cb6c7ee23823b8781b9e
SHA1
8d4d5c9d6ba7ff98cb2c15578e891af632177f99
SHA256
c642dc2b629dac677ec7c03e1881e1f065ea3d6deb243e497f6ddf5cff28dc7f
SHA512
4c3009a59b32e534d375a7e37d768dcb7529ee0fdb40b0d07f0291c77ea67fc1ef8bb82164c342bd9f7dfd9b397c1613a3ff20ba8966da8325b4aa44785ded7e
SSDEEP
96:Nsa9BzfTwOnu4bP3+ppNVFMfyt+mSqmwX0rhYHy+K1vBMk:NLzfTwOnu4bP3+pzVFMf9mtm00rhIQp
Checks for missing Authenticode signature.
resource |
---|
18bce039f2a4cb6c7ee23823b8781b9e_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateEventA
CloseHandle
SetEvent
lstrcpyA
ResetEvent
OpenEventA
WriteProcessMemory
ReadProcessMemory
GetCurrentProcess
GlobalLock
GlobalAlloc
GetProcAddress
GetModuleHandleA
lstrlenA
TerminateProcess
WaitForSingleObject
GetVersionExA
SetLastError
GetLastError
lstrcmpiA
GetModuleFileNameA
SetWindowsHookExA
wsprintfA
CallNextHookEx
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
Config
Intercept
Setup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ