API����
����_HTTP��Դ��
���ش���
ȡIP��ַ_
���ٴ���
Static task
static1
Behavioral task
behavioral1
Sample
b5064c29ed6d1ad78b6c56f2263000ff_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b5064c29ed6d1ad78b6c56f2263000ff_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b5064c29ed6d1ad78b6c56f2263000ff_JaffaCakes118
Size
121KB
MD5
b5064c29ed6d1ad78b6c56f2263000ff
SHA1
91893a77f2350555784f1c1811566dc2ac50f136
SHA256
c0a6edf01686a68b832616098619fe5fcb153ebe1831f626f5f38d726ee9fabb
SHA512
67b3aa4289b666f198c54e121306427db103af3b49b2902860cf2ca005bf5286df222d98a7ed129a465b3f1e9967394afb684bdc7e1a1e9705b5f20b0fc5f1bd
SSDEEP
1536:wcpJwUKVt2N8saKd9TLU5jV29Pn2D5egmgiMTUheZDAWpm6ObGZ5OFqwydxaJZeR:vwUZ8saKTLPP2D5TpNR1pL97+0vx
Checks for missing Authenticode signature.
resource |
---|
b5064c29ed6d1ad78b6c56f2263000ff_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
API����
����_HTTP��Դ��
���ش���
ȡIP��ַ_
���ٴ���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ