progof
progon
Static task
static1
Behavioral task
behavioral1
Sample
2ecb22b3376267eefd08eec1c0e201b9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ecb22b3376267eefd08eec1c0e201b9_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ecb22b3376267eefd08eec1c0e201b9_JaffaCakes118
Size
17KB
MD5
2ecb22b3376267eefd08eec1c0e201b9
SHA1
965c25839126794f7a65d31905ed781d90f8e73b
SHA256
a29cc27f0a7a6f21ad625911c01ceb288651a1318fea754febf53a74ca0ea28f
SHA512
9418176da15dfe90f5afb4af765cf9c8f776067e2ab10099173fd2be5b59ea055544e90c1ae0eec9060b4c0a0b455bfcd90f8af435a4a24dca37c983efc95c0c
SSDEEP
384:OqS5VMQxaS4x6rUHvrYC6llVUG0EhTMdgfo/PySx9gM:O0pTx6rUDYdllVU2M2fpvM
Checks for missing Authenticode signature.
resource |
---|
2ecb22b3376267eefd08eec1c0e201b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
IsBadReadPtr
ExitProcess
lstrcmpiA
Sleep
lstrcpyA
lstrcmpA
lstrlenA
GetTickCount
lstrcpynA
WritePrivateProfileStringA
GetSystemTime
GetTempPathA
GetPrivateProfileStringA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
CreateThread
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
progof
progon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ