?SendMail@@YA_NAAPBDPBD111111111@Z
Run
Static task
static1
Behavioral task
behavioral1
Sample
bc91fd8c103a37755432db5dad9832b7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bc91fd8c103a37755432db5dad9832b7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bc91fd8c103a37755432db5dad9832b7_JaffaCakes118
Size
24KB
MD5
bc91fd8c103a37755432db5dad9832b7
SHA1
e630c30d82ecf1bd48c50fa6e5f59beeed054a5d
SHA256
0cb96d57f441bd085524afeb7d4eab7184b76c13165c51dc6c29bc96bb93ed65
SHA512
f37abbda4e5640e6afb2b915e826ef45607a633c9a57781526917f7d5654ca48492f4c5c463eaad70e5c112255036b30669d11c16b523b1db1560bd22220cbd0
SSDEEP
96:pmnce/UbmIZ9kesd5UfOVrrlaS4/1bc1936OERSSUt9SxWcfT3aMFCcinew5osVc:pmR/DIZy5vVflaSH9ySFt9SAdYElk
Checks for missing Authenticode signature.
resource |
---|
bc91fd8c103a37755432db5dad9832b7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
GetProcAddress
LoadLibraryA
WriteProcessMemory
VirtualAlloc
GetModuleHandleA
MoveFileExA
CopyFileA
GetCurrentProcess
lstrcmpiA
WinExec
WriteFile
CreateFileA
GetTempPathA
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
CreateThread
GetWindowsDirectoryA
Sleep
SendMessageA
FindWindowA
wsprintfA
RegEnumValueA
RegOpenKeyA
RegCloseKey
InternetOpenA
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
PathFileExistsA
_adjust_fdiv
malloc
_initterm
free
strstr
_except_handler3
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
?SendMail@@YA_NAAPBDPBD111111111@Z
Run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ