prkai
progof
Static task
static1
Behavioral task
behavioral1
Sample
3dbf7ae390edcf2217d7f064bd29b3bb_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3dbf7ae390edcf2217d7f064bd29b3bb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3dbf7ae390edcf2217d7f064bd29b3bb_JaffaCakes118
Size
18KB
MD5
3dbf7ae390edcf2217d7f064bd29b3bb
SHA1
ddd808425dba0f3ad3df4fca47eb93763fc3f0b6
SHA256
9ad4555fd9d376c2d9d444587708cdda05d48adc67e40c79958fa983c2bd020b
SHA512
39a6bc6b9aae90c10e389e6a63a2b906c97af4aaf55158025ec6a94d81871725a63ec095c092e570872f296dde0fb9e6aff36a6987281daa991226887c10df2a
SSDEEP
384:SSzVaAUs9auLlozwL+3e0pXD+mJQ9iBklad32+cLAlzxFN4F/o:uuauLlozwL+OsqmJQ9iBkMl2UFeF/o
Checks for missing Authenticode signature.
resource |
---|
3dbf7ae390edcf2217d7f064bd29b3bb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
IsBadReadPtr
lstrcmpA
lstrcmpiA
Sleep
lstrcpyA
ExitProcess
lstrlenA
GetTickCount
lstrcpynA
WritePrivateProfileStringA
GetSystemTime
GetTempPathA
GetPrivateProfileStringA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
CreateThread
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
prkai
progof
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ