AR
GetVer
SD
w
Static task
static1
Behavioral task
behavioral1
Sample
62c09ce57e4ba944a5cf440a3797a69a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62c09ce57e4ba944a5cf440a3797a69a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
62c09ce57e4ba944a5cf440a3797a69a_JaffaCakes118
Size
56KB
MD5
62c09ce57e4ba944a5cf440a3797a69a
SHA1
b8f11e49809e032e9163a8300e24903c1093db13
SHA256
de67d896a9573d0d2c5161deded81a0ba83053a12bed33c5f12cd75b6fc733a7
SHA512
cc0145705116a39a280e29e6d427351d8959be16da5c1a950356e591663c514aa4b0414017393ebacc926c84708de86e77b4c50afe8a80171d2d18944f25085d
SSDEEP
768:Tq2rc/SCo9KL4K3FHADRDWl9YZAr2z7BXLbMxhiJVJCEI:+Ic/SCFL8Jw9Ya2hXLaiJVJCE
Checks for missing Authenticode signature.
resource |
---|
62c09ce57e4ba944a5cf440a3797a69a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
Sleep
DeleteFileA
WinExec
GetBinaryTypeA
GetTickCount
GetTempPathA
GetLocalTime
VirtualQuery
CreateThread
VirtualProtect
GetCommandLineA
CloseHandle
GetCurrentProcess
GetFileAttributesA
GetModuleFileNameA
GetFileAttributesExA
FileTimeToSystemTime
GetComputerNameA
GetVersionExA
GetModuleHandleA
GetSystemInfo
TranslateMessage
SetWindowsHookExA
CallNextHookEx
CharLowerA
wsprintfA
MessageBoxA
DispatchMessageA
GetMessageA
GetSystemMetrics
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegSetValueExA
RegOpenKeyExA
AdjustTokenPrivileges
fgets
malloc
free
_initterm
_adjust_fdiv
calloc
_splitpath
memset
sprintf
strlen
strcpy
atoi
??2@YAPAXI@Z
memcpy
strchr
strncmp
rename
remove
_access
strstr
strcat
_except_handler3
fclose
fopen
_stricmp
Netbios
closesocket
recvfrom
sendto
WSAStartup
recv
send
connect
inet_addr
setsockopt
htons
gethostbyname
socket
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
AR
GetVer
SD
w
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ