Record2
StartFindFields
StartRecHwnd
StartRecPid
StartSend
StopFindFields
StopRec
TestFindFields
TestSendFiles
Static task
static1
Behavioral task
behavioral1
Sample
826d97f7fd8e8b6d5cddebcaa8ea1a35_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
826d97f7fd8e8b6d5cddebcaa8ea1a35_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
826d97f7fd8e8b6d5cddebcaa8ea1a35_JaffaCakes118
Size
115KB
MD5
826d97f7fd8e8b6d5cddebcaa8ea1a35
SHA1
0cbcdf70c1d060e8c0e8ded028f16bee051bc762
SHA256
b56f849ecb5ba7d27e0eb2f13c1cd89f092a0acef25710f4cbccaca16de72023
SHA512
74c7dbb6230fa1d4bb484899e6839d30582a820bc59d1fe751c604fd0f8cc5dbc786136352b16335a8b138f4cb49d2136c5625551540d839467f89427ba26cff
SSDEEP
768:xioPFVHI0XVFKJ6OSWEgy2yrr3fdhRKBBRHStAkd3Xnc+lDn3XnA4cC8Ycwk:jNhI0XV+wDfdhoB2hdhDn4fZwk
Checks for missing Authenticode signature.
resource |
---|
826d97f7fd8e8b6d5cddebcaa8ea1a35_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
recv
send
connect
inet_addr
htons
socket
WSACleanup
closesocket
WSAStartup
GetModuleFileNameExA
PathFileExistsA
PathRemoveFileSpecA
PathAppendA
PathFindFileNameA
LocalFree
WriteFile
CloseHandle
CreateFileA
GetTempPathA
OpenProcess
GetFileSize
SetFilePointer
lstrlenA
lstrcpyA
GetLastError
lstrcmpA
GetFileTime
FindFirstFileA
FindNextFileA
FindClose
OutputDebugStringA
Sleep
DeleteFileA
CreateThread
LocalAlloc
ReadFile
GetDesktopWindow
GetWindow
GetWindowTextA
LoadImageA
GetWindowDC
GetWindowRect
GetWindowThreadProcessId
GetForegroundWindow
wsprintfA
GetParent
CreateCompatibleBitmap
GetBitmapBits
DeleteDC
GetDIBits
BitBlt
SelectObject
GetObjectA
CreateCompatibleDC
DeleteObject
SHGetFolderPathA
Record2
StartFindFields
StartRecHwnd
StartRecPid
StartSend
StopFindFields
StopRec
TestFindFields
TestSendFiles
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ