mrecv
msend
Static task
static1
Behavioral task
behavioral1
Sample
3a3402039cb5560ab3ac783ea82b662d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a3402039cb5560ab3ac783ea82b662d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3a3402039cb5560ab3ac783ea82b662d_JaffaCakes118
Size
32KB
MD5
3a3402039cb5560ab3ac783ea82b662d
SHA1
52f16b24694d703b6142cc735e63ead92519a881
SHA256
209b7a9e1829aa431cc7b1cdde24ad2ba3f0d268f4464ab3bc8ffc4cb69796dd
SHA512
d896d72efff12e7625e8908de431bb34d592723f344a3cb198706b66a3ac894eb7ff16acbc96b1cc7671bdb76d06a8e7da2dba591642891a80307fa503383578
SSDEEP
768:YGfKVA0GZDfET8cQgQ1Pct6QEWdKPdFoDtoU:YGf7bET8c81Pcth9dKjSo
Checks for missing Authenticode signature.
resource |
---|
3a3402039cb5560ab3ac783ea82b662d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteProcessMemory
ReadProcessMemory
ExitProcess
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetComputerNameA
RtlUnwind
Sleep
GetCurrentProcess
CreateThread
CloseHandle
GetModuleFileNameA
GetCurrentProcessId
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
GetWindowThreadProcessId
FindWindowA
GetWindowTextA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
mrecv
msend
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ