GetRas
InitDll
writ
Static task
static1
Behavioral task
behavioral1
Sample
ade348ea3a6c8457bbe8c1bdbef75d93_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ade348ea3a6c8457bbe8c1bdbef75d93_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ade348ea3a6c8457bbe8c1bdbef75d93_JaffaCakes118
Size
20KB
MD5
ade348ea3a6c8457bbe8c1bdbef75d93
SHA1
5e8e36e97159d1467fc9f1c89b6e3ffeaaf03155
SHA256
2dd6b7999b82642dff9d6b0a7a6c002350927a2c1465b7aa1194148eb7935e8b
SHA512
cfed2da29df9658a84e0b87a0be5d4ce1119653208f43a94d928e1323717928a5e447244a0205c1f74285b8d2f1f98a44550bed70e2360fed2603af82667fec5
SSDEEP
384:7WVZatz8o08trcxeLgUR4Et2W9aVWvLf:7WUCKrc0LgUR4F
Checks for missing Authenticode signature.
resource |
---|
ade348ea3a6c8457bbe8c1bdbef75d93_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord823
ord1168
_strnicmp
_stricmp
strncpy
strncat
sprintf
atoi
malloc
wcscpy
wcscat
wcslen
free
strncmp
_itoa
GetSystemDirectoryA
SetFileTime
GetFileTime
CreateThread
ReadProcessMemory
OpenProcess
GetCurrentProcessId
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetEnvironmentVariableA
WriteProcessMemory
WriteFile
SetFilePointer
CloseHandle
GetFileSize
CreateFileA
WideCharToMultiByte
DeleteFileA
ReadFile
Sleep
GetLocalTime
Process32Next
Process32First
CreateToolhelp32Snapshot
SetWindowsHookExA
RegOpenKeyA
LsaRetrievePrivateData
LsaOpenPolicy
RegCreateKeyA
RegSetValueExA
RegCloseKey
LsaClose
RegQueryValueExA
GetUserNameA
LookupAccountNameA
connect
socket
htons
inet_addr
send
recv
closesocket
gethostname
gethostbyname
inet_ntoa
WSAStartup
RasEnumEntriesA
RasGetEntryPropertiesA
RasGetEntryDialParamsA
GetRas
InitDll
writ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ