Down
Event1Proc
Init
Up
Static task
static1
Behavioral task
behavioral1
Sample
3fc204acf042f6ad7b73391be7e47c2e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3fc204acf042f6ad7b73391be7e47c2e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3fc204acf042f6ad7b73391be7e47c2e_JaffaCakes118
Size
15KB
MD5
3fc204acf042f6ad7b73391be7e47c2e
SHA1
b95f46c9f1bdb9edca9874ebdfa60546daac1a20
SHA256
7b36e9bbfa94da54bfcf30ea26f47116a2ac9f5ea6ab73bcbad88052fe5d494b
SHA512
5a0e85d485776a88e61e2d3998c68e331205ab79a35f9a1cb9ba05f5447b453c6926225a050cd55a596bcad2f61d4db450abfd55a1be6e1b5f681e6d8110b42c
SSDEEP
192:wR+ICAvqug0d2zzBWiJ1s7OnbNL3Rz1oHgng3E1P7RjA5TuuK4VwhL930Npp4zeg:wcgqugdWKC7OlVf1JwuuzS930Nux
Checks for missing Authenticode signature.
resource |
---|
3fc204acf042f6ad7b73391be7e47c2e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalMemoryStatus
GlobalUnlock
LoadLibraryA
OpenProcess
Process32First
Process32Next
ReadFile
SetFileAttributesA
SetFilePointer
GlobalLock
Sleep
TerminateProcess
WinExec
WriteFile
_lwrite
lstrcatA
lstrcmpiA
lstrlenA
GlobalFree
GlobalAlloc
GetVersion
GetTempPathA
CloseHandle
GetSystemDirectoryA
GetProcAddress
GetLogicalDriveStringsA
GetFileSize
GetFileAttributesA
GetComputerNameA
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateToolhelp32Snapshot
CreateThread
CreateFileA
CopyFileA
SetFileTime
CallNextHookEx
FindWindowA
GetDC
GetWindowThreadProcessId
wsprintfA
ReleaseDC
SendMessageA
SetWindowsHookExA
UnhookWindowsHookEx
PostMessageA
GetSystemMetrics
WSACleanup
WSAStartup
closesocket
connect
gethostbyname
gethostname
htons
inet_addr
socket
send
recv
inet_ntoa
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
GetUserNameA
ShellExecuteA
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
DeleteDC
GetDIBits
GetDeviceCaps
GetObjectA
GetStockObject
RealizePalette
SelectObject
SelectPalette
Down
Event1Proc
Init
Up
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ