Outt
Sett
Static task
static1
Behavioral task
behavioral1
Sample
b84a6b86516b9e6c36905d0bd4769d4d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b84a6b86516b9e6c36905d0bd4769d4d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b84a6b86516b9e6c36905d0bd4769d4d_JaffaCakes118
Size
83KB
MD5
b84a6b86516b9e6c36905d0bd4769d4d
SHA1
1acf871e621708ab07beb90f0e5e1c150760b33c
SHA256
19dd85ff1e1eb4af738445bbeec667148082b8ef9af9e32dfa1c3c2bf3433e2d
SHA512
627c6f22342ea744f3b13c5a61b4c3ad9585cdf220ffbd00ccdb91eed940603fdff0da64e2b8cd238be37e1d7c39fb7581b2004298fed95b4e12f4345b0dcbd9
SSDEEP
1536:GL/5ham3BFyPd9xV9JU7J7G98X2utGUFxUCQE3J:C/3am3MxV9JU7J7GzuDDUCbJ
Checks for missing Authenticode signature.
resource |
---|
b84a6b86516b9e6c36905d0bd4769d4d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_stricmp
isalpha
_strcmpi
_strupr
isdigit
realloc
_itoa
_vsnprintf
tolower
__CxxFrameHandler
atoi
??3@YAXPAX@Z
isprint
memcmp
strchr
memcpy
sprintf
malloc
free
exit
strrchr
strcpy
strncpy
wcsstr
wcscpy
wcsncat
strstr
wcslen
time
srand
rand
memset
strcat
_except_handler3
strlen
mbstowcs
fopen
fseek
ftell
fclose
??2@YAPAXI@Z
wcscmp
_strlwr
_strdup
htons
socket
WSAStartup
recv
send
gethostbyname
connect
SelectObject
DeleteObject
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
CreateDCA
DeleteDC
HeapAlloc
SetFilePointer
CloseHandle
GetModuleHandleA
GetProcAddress
GetPrivateProfileStringA
GetCurrentProcessId
GetFileSize
GetProcessHeap
Sleep
WideCharToMultiByte
GetFileAttributesW
GetTempPathA
DeleteFileA
IsBadReadPtr
LoadLibraryA
FreeLibrary
VirtualAlloc
VirtualFree
CreateFileA
CreateThread
GetModuleFileNameA
ReadFile
lstrcpynA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetDC
GetWindowRect
wvsprintfA
wsprintfA
GetWindow
GetClassNameW
GetWindowThreadProcessId
GetWindowTextA
Outt
Sett
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ