API����
end
����_HTTP��Դ��
���ش���
ȡIP��ַ_
���ٴ���
Static task
static1
Behavioral task
behavioral1
Sample
3853ae4498499e16b7eaba12cfbadeaa_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3853ae4498499e16b7eaba12cfbadeaa_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3853ae4498499e16b7eaba12cfbadeaa_JaffaCakes118
Size
97KB
MD5
3853ae4498499e16b7eaba12cfbadeaa
SHA1
c21e24c17341b2ed665eb65ed559c0ba9e076489
SHA256
909ddd591005838d8ae950c9795999106557dec6ba5a51d42fc84c3bb6d7172f
SHA512
40326250f2c6da7535087217d6037d3730cd5f4868b3eae717c5f9c22090975ed8cf597a30b37228ed603ed4da8aa96efeb1e55e8a4a1ee1188804290c2c8485
SSDEEP
1536:cvwyVT5MeqyJLGTerCWW2vyJLZ1c97WGr9IuSB3beiVKaZfYOa2:poT9fB+V2KlZYFu5fra
Checks for missing Authenticode signature.
resource |
---|
3853ae4498499e16b7eaba12cfbadeaa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
API����
end
����_HTTP��Դ��
���ش���
ȡIP��ַ_
���ٴ���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ