mrecv
msend
Static task
static1
Behavioral task
behavioral1
Sample
59c8807f3b7a98715bf12df9c0c754e8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
59c8807f3b7a98715bf12df9c0c754e8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
59c8807f3b7a98715bf12df9c0c754e8_JaffaCakes118
Size
44KB
MD5
59c8807f3b7a98715bf12df9c0c754e8
SHA1
6634e7eb9222d3ca6bd3e9c7880e59877c493504
SHA256
8da04271a1e76c77489aa0168df23a5830f9c592554cf0551fb4c85e8b0a136e
SHA512
0a356aaa4d067f63df5fdcb4fafa5d018b264f9ccf5a611ce0d42d953acf74232d2da367d12f98c2dd4fa36db2b72c03920e6e9cedc02d4108cd604fae05d75b
SSDEEP
768:2SyaL46qIi4nbfTmpT+xDbGk/gIYsQd4vTKs1d9X/toU:Ty6qmuT+xJgIYvSbKsdlo
Checks for missing Authenticode signature.
resource |
---|
59c8807f3b7a98715bf12df9c0c754e8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
WriteProcessMemory
ReadProcessMemory
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
ExitProcess
GetCurrentProcess
RtlUnwind
CloseHandle
GetModuleFileNameA
Sleep
GetCurrentProcessId
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetWindowTextA
FindWindowA
GetWindowThreadProcessId
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
mrecv
msend
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ