prkai
progof
Static task
static1
Behavioral task
behavioral1
Sample
26188fb495d3c7f358ac0bf681a77e04_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
26188fb495d3c7f358ac0bf681a77e04_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
26188fb495d3c7f358ac0bf681a77e04_JaffaCakes118
Size
18KB
MD5
26188fb495d3c7f358ac0bf681a77e04
SHA1
8e5a85e78b171223b3f8a267d9dcd1f8e789c95d
SHA256
2d35f8705d5c024001181d9fa775c60d213140819bdd43297426916427bd566c
SHA512
7d25e639b42c84fb16887e480521a0bc3acaf0fdfcd8ead411e306a5c0fda5468d886ee130a8bd6c9992791f63df45ecf3a6f6bd41d81be54d35e65a9097af6b
SSDEEP
384:6SjVazRRVs4D8e5t+YjpKDMDeV6At+UladGSGKLAlzS1:Cs4D80VcwDeV6At+UMcSp
Checks for missing Authenticode signature.
resource |
---|
26188fb495d3c7f358ac0bf681a77e04_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
IsBadReadPtr
lstrcmpA
lstrcmpiA
Sleep
lstrcpyA
ExitProcess
lstrlenA
GetTickCount
lstrcpynA
WritePrivateProfileStringA
GetSystemTime
GetTempPathA
GetPrivateProfileStringA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
CreateThread
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
prkai
progof
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ