Maplestory
QQ��
ip��ַ
mini
��½������
ʱ��
��վ
ע��
Static task
static1
Behavioral task
behavioral1
Sample
288b307dedd22563e52a37c5a32f88c7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
288b307dedd22563e52a37c5a32f88c7_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
288b307dedd22563e52a37c5a32f88c7_JaffaCakes118
Size
5KB
MD5
288b307dedd22563e52a37c5a32f88c7
SHA1
746e556cfb196a325dbc50417fe83fdc450ab0a2
SHA256
03f7802d397450b543c67c7082dc38634ba19c539157ade38f8e564214e020b7
SHA512
a8875ea413be263c800c9e5af812aacbdd1a00cdff03a26667186171493ddac935d4d550aa3f5fce625e661b36ea533cdac9aed3f05de2d5580bd050f2e0a602
SSDEEP
48:KHYI0YfAvaX2n5DYXdZ9pmd8Lwd7DzfmBoBjXfD5bUI0K4UzxK/2LGvW/Lmj0t:eYvlg7pPS1XfDJUI0KD9K2/Lmj0t
Checks for missing Authenticode signature.
resource |
---|
288b307dedd22563e52a37c5a32f88c7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Maplestory
QQ��
ip��ַ
mini
��½������
ʱ��
��վ
ע��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ