ZtGame_IN
ZtGame_OUT
Static task
static1
Behavioral task
behavioral1
Sample
669fb44c49a38bb47e9e5ac6651f6819_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
669fb44c49a38bb47e9e5ac6651f6819_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
669fb44c49a38bb47e9e5ac6651f6819_JaffaCakes118
Size
23KB
MD5
669fb44c49a38bb47e9e5ac6651f6819
SHA1
883ab36a425989c12cf0336b5eafa83af4636473
SHA256
31ece83e0b31c25cf32089cbe667417d165721f7caba411968c0a0342afe223f
SHA512
959bfcc5db8fa5871aefd1b360f35d13d685f3c2d35389a941582fa86c5d102293c0a45d5e8f20aa33fb0c88fa203c90221368bea285624c020c9df8a5de7651
SSDEEP
384:zUiIBkRo4yvbblxuGaBVRaQzkJCVqJVZPKoCZJ4:zJIBqbyvHuGa0QzkJCmPTKJ
Checks for missing Authenticode signature.
resource |
---|
669fb44c49a38bb47e9e5ac6651f6819_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentThreadId
CloseHandle
CreateProcessA
GetTempPathA
Sleep
GetVersionExA
WriteProcessMemory
VirtualProtectEx
LoadLibraryA
GetCurrentProcess
ExitProcess
CreateThread
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetTickCount
GetProcAddress
VirtualFree
ReadProcessMemory
VirtualAlloc
CallNextHookEx
SetWindowsHookExA
wsprintfA
GetMessageA
PostThreadMessageA
GetInputState
UnhookWindowsHookEx
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
shutdown
closesocket
WSAStartup
select
connect
gethostname
htons
ioctlsocket
socket
send
recv
__WSAFDIsSet
gethostbyname
inet_addr
WSACleanup
inet_ntoa
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
ZtGame_IN
ZtGame_OUT
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ