DLD
LSD_F3
Static task
static1
Behavioral task
behavioral1
Sample
28ef9bc394b0406bcf4c13238de56618_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28ef9bc394b0406bcf4c13238de56618_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
28ef9bc394b0406bcf4c13238de56618_JaffaCakes118
Size
17KB
MD5
28ef9bc394b0406bcf4c13238de56618
SHA1
c0a28af3feaecf5fe8489286568d42e530f9f344
SHA256
b939f20f6371022f125757d4afb337814462775945a5900440f50364665e9f74
SHA512
1c12397dfd7e9067d60542fd552fdd93d3c6a26db4dcd218082f08791fbf5faae2dfd6851388cb8911456034aaf13b81f26f89e0419e3746a078a77b61575930
SSDEEP
384:T0Vu2WOpTxdq1yesLZSz6R12fgRK7Uq0BKXRCusrcFrFkaEF:Yk2WOFbKRdpEF
Checks for missing Authenticode signature.
resource |
---|
28ef9bc394b0406bcf4c13238de56618_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetDlgItemTextA
GetWindowTextA
GetForegroundWindow
ShowWindow
SetDlgItemTextA
wsprintfA
GetClassNameA
EnumChildWindows
EndDialog
DialogBoxIndirectParamA
GetDlgItem
OpenProcess
LockResource
ord5
LoadLibraryA
LoadResource
lstrlenA
CloseHandle
CreateFileA
CreateThread
DeviceIoControl
ExitThread
FindResourceA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
RtlZeroMemory
Sleep
VirtualProtectEx
_lread
lstrcatA
VirtualAlloc
_llseek
OpenProcess
LockResource
ord5
LoadLibraryA
LoadResource
lstrlenA
CloseHandle
CreateFileA
CreateThread
DeviceIoControl
ExitThread
FindResourceA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
RtlZeroMemory
Sleep
VirtualProtectEx
_lread
lstrcatA
VirtualAlloc
_llseek
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
closesocket
connect
gethostbyname
send
socket
WSACleanup
WSAStartup
DLD
LSD_F3
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ