������!
=TMD=
QQ364731605
������,����ϵ E-mail:[email protected] [������ð]
Static task
static1
Behavioral task
behavioral1
Sample
82d7dfe42505c5a246f3248e058236ee_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
82d7dfe42505c5a246f3248e058236ee_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
82d7dfe42505c5a246f3248e058236ee_JaffaCakes118
Size
864KB
MD5
82d7dfe42505c5a246f3248e058236ee
SHA1
d967835d26b407031f73608a2d6c234c6290cc73
SHA256
eb6d7ebee00657686e6559e8f68de7b2104437a9dd72af25ceee82354cbab7ad
SHA512
9f01d6c448a154ef38ad5cb8fbce579a00a4bf20fc47ced0a19fe65aa59f5025229ea6f75797d7573c081c12f4d8b8cf4da47bf898b919d14c3e73310f31490a
SSDEEP
24576:NKaFty+yr+Ts4e3kmYn0YaAs4LKM56TrpzJkAT+EOL0Eyv:M3wCT9hKs
Checks for missing Authenticode signature.
resource |
---|
82d7dfe42505c5a246f3248e058236ee_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
inet_ntoa
InternetOpenW
StrStrW
ImmGetCompositionStringW
mixerSetControlDetails
GetModuleFileNameExW
CreateEnvironmentBlock
GetModuleHandleA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
SetWindowsHookExW
MessageBoxA
BitBlt
CreateServiceW
ShellExecuteExW
CoInitialize
SysFreeString
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ