mrecv
msend
Static task
static1
Behavioral task
behavioral1
Sample
3ee44cebb72ee6aec526801b9cc10a94_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ee44cebb72ee6aec526801b9cc10a94_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3ee44cebb72ee6aec526801b9cc10a94_JaffaCakes118
Size
44KB
MD5
3ee44cebb72ee6aec526801b9cc10a94
SHA1
72892f80fd3d6b54211c219ee0aece0877aad411
SHA256
b50b1c3a1f40ae4617bb72d71786718481a2631a04932a91e5068f29888a0002
SHA512
cc011fd4293e7114f2f0d5cc6515d19439ca7802a707b4c60a98156914fb3934f6732c388d00e7f4685357d4042e382d091507491e935b63e537207a0d07dfe6
SSDEEP
768:oaabtf8ZTyTDWOgZmSNJJh7Ek1J4GwlMtL:oKyTDWOgQSrDPelo
Checks for missing Authenticode signature.
resource |
---|
3ee44cebb72ee6aec526801b9cc10a94_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Thread32First
CreateToolhelp32Snapshot
GetThreadPriority
GetProcAddress
GetModuleHandleA
GlobalFree
ReadProcessMemory
GlobalLock
GlobalAlloc
VirtualProtectEx
WideCharToMultiByte
TerminateThread
CreateThread
ExitProcess
GlobalUnlock
WriteProcessMemory
GetCurrentProcess
GetCurrentProcessId
GetModuleFileNameA
CloseHandle
Thread32Next
GetPrivateProfileStringA
Sleep
RtlUnwind
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
mrecv
msend
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ