EventWinlogon
SetConnection
Static task
static1
Behavioral task
behavioral1
Sample
8dd8c0d1288250d51d006ba5f3a57d08_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8dd8c0d1288250d51d006ba5f3a57d08_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8dd8c0d1288250d51d006ba5f3a57d08_JaffaCakes118
Size
80KB
MD5
8dd8c0d1288250d51d006ba5f3a57d08
SHA1
38ff667575d91d71fbfc8f2ffb4a1cbc4c791cff
SHA256
7f7287e16eec50c8eb173e122be0253112cbc54cf9e41470e08fb5bb3dd1d93b
SHA512
ef716c3b91cfbe05e2873c841af4ca84d6878f6d03e8376515634cc87db2783362e4fbdd4a26b71082f52fa426311e99b4763adaadf217c7a0e355f27082486d
SSDEEP
1536:O/CDY/8/tq5lweRpo4lFa6TbkTBgLJQzZG37l73d:fs/8/4ces7iOFG37l73d
Checks for missing Authenticode signature.
resource |
---|
8dd8c0d1288250d51d006ba5f3a57d08_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ReadFile
CloseHandle
GetFileSize
CreateFileA
TerminateProcess
DeleteFileA
GetTempPathA
WriteFile
GetSystemTime
GetLogicalDrives
SetEvent
CreateEventA
TerminateThread
CreateRemoteThread
WriteProcessMemory
VirtualProtectEx
VirtualAllocEx
GetProcAddress
Sleep
CreateMutexA
GetVolumeInformationA
GetComputerNameA
SetEndOfFile
HeapSize
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
WaitForSingleObject
ReleaseMutex
CreateThread
GetModuleHandleA
GetSystemDirectoryA
CreateProcessA
WaitForMultipleObjects
LoadLibraryA
HeapReAlloc
GetSystemInfo
VirtualAlloc
VirtualProtect
InitializeCriticalSection
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
GetCPInfo
MultiByteToWideChar
CompareStringA
SetFilePointer
VirtualQuery
InterlockedExchange
RtlUnwind
UnhandledExceptionFilter
VirtualFree
ExitProcess
GetCurrentThreadId
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
WideCharToMultiByte
GetCurrentProcess
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
GetLastError
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
CallNextHookEx
SetWindowsHookExA
DestroyWindow
DefWindowProcA
PostQuitMessage
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
SetTimer
UnhookWindowsHookEx
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
URLDownloadToFileA
send
recv
connect
closesocket
shutdown
ioctlsocket
WSAAsyncSelect
WSACleanup
WSAIoctl
setsockopt
accept
bind
htons
htonl
socket
WSAStartup
inet_addr
EventWinlogon
SetConnection
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ