AR
GetVer
HTTPSendStrFun
w
Static task
static1
Behavioral task
behavioral1
Sample
759768517e46fc8258ce052c32fb4f29_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
759768517e46fc8258ce052c32fb4f29_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
759768517e46fc8258ce052c32fb4f29_JaffaCakes118
Size
68KB
MD5
759768517e46fc8258ce052c32fb4f29
SHA1
6c69912965a6fda3862bd71121d6edee6392e043
SHA256
5509f6da73613a17acdccd9fd1406b8d241dbdc4db10b404db84c6b2e75001ad
SHA512
384a81190300e87b440ca3e67f54e0a3454a2d63bfb4ea7f9b9adf99277f80969a8bcff30f94263b5ed1b1e7c2fcff2682f22c06782b9bc3a704bf7f8179e4e4
SSDEEP
768:iHqTzjBnu6sJJY3Vum6ZPFnToIf1DTH0oOx:iHqTzdu6sJcf6ZPFnToIf1UoO
Checks for missing Authenticode signature.
resource |
---|
759768517e46fc8258ce052c32fb4f29_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
GetCurrentProcess
GetModuleFileNameA
GetStringTypeA
LCMapStringW
CreateThread
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
GetBinaryTypeA
WinExec
DeleteFileA
GetTempPathA
Sleep
LoadLibraryA
GetModuleHandleA
GetProcAddress
lstrcmpiA
GetVersionExA
LCMapStringA
GetSystemInfo
GetStringTypeW
CharLowerA
wsprintfA
SetWindowsHookExA
GetMessageA
GetSystemMetrics
TranslateMessage
DispatchMessageA
CallNextHookEx
RegSetValueExA
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegCloseKey
RegCreateKeyA
recv
send
setsockopt
sendto
recvfrom
gethostbyname
WSAStartup
socket
inet_addr
htons
connect
closesocket
strncmp
_initterm
_access
rename
strchr
atoi
??2@YAPAXI@Z
_splitpath
malloc
sprintf
_except_handler3
strstr
free
_adjust_fdiv
AR
GetVer
HTTPSendStrFun
w
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ