CallRewe
Cfg
Cfg_int
Env
File
Find
FindPidFile
FreePort
Jpf
LastError
Numify
Open
PidFile
Request
Scan
Spawn
SpawnIf
StartRewe
Stringify
Synchronize
Test
_Join
_Request
dll
fini
jardiff
Static task
static1
Behavioral task
behavioral1
Sample
4a59d3a7976e46884d5e80c780598f03_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a59d3a7976e46884d5e80c780598f03_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4a59d3a7976e46884d5e80c780598f03_JaffaCakes118
Size
25KB
MD5
4a59d3a7976e46884d5e80c780598f03
SHA1
6fb43e2ae838e065e91c01fae04bfaa35e02ad5f
SHA256
bdf121f921bf1a94af9a06cf4b7755b1d9a291de3e27cc111243591d85c5e2d6
SHA512
b1d401bc0b8604297c4ff7bf2a372f6f9889052d8b5ddf1c7d0bfad3ee607b31d972ae8bc013d66378beae0a38be404c59e096ce36c0f577b1d4b9234912e492
SSDEEP
384:6Fq8kSCOk7cRodTeC1ZkefDKXl87JHgxS4T1+:Qq8MZndTeC9KVqJHgxB1+
Checks for missing Authenticode signature.
resource |
---|
4a59d3a7976e46884d5e80c780598f03_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetTcpTable
GetUdpTable
CloseHandle
CreateFileA
CreateProcessA
DeleteCriticalSection
EnterCriticalSection
FindFirstFileA
FormatMessageA
FreeLibrary
GetEnvironmentVariableA
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalFree
OutputDebugStringA
ReadFile
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
__dllonexit
_errno
_iob
_winmajor
abort
atoi
calloc
fflush
free
fwrite
malloc
memcpy
strstr
vfprintf
BringWindowToTop
EnumWindows
GetClassNameA
GetWindowTextA
GetWindowThreadProcessId
MessageBoxA
wsprintfA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
WSACleanup
WSAGetLastError
WSAStartup
closesocket
connect
gethostbyname
htons
inet_addr
ioctlsocket
ntohs
recv
send
socket
CallRewe
Cfg
Cfg_int
Env
File
Find
FindPidFile
FreePort
Jpf
LastError
Numify
Open
PidFile
Request
Scan
Spawn
SpawnIf
StartRewe
Stringify
Synchronize
Test
_Join
_Request
dll
fini
jardiff
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ