mrecv
msend
Static task
static1
Behavioral task
behavioral1
Sample
ced383d363fd6ae89b29daec251e1ef9_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ced383d363fd6ae89b29daec251e1ef9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ced383d363fd6ae89b29daec251e1ef9_JaffaCakes118
Size
44KB
MD5
ced383d363fd6ae89b29daec251e1ef9
SHA1
f7010c8ffcb470e43411acb82f10f7a157fde45e
SHA256
0044357ed10dc8083b80aa13af68e974856fe9d8853700a7649fb21b75690d17
SHA512
04f287f3625eb8dc906c24359224e505a6ace461acc2a956a81a71ef48d70d68399a68f464a254d3edb4ae68c909e1c8988c4bd87aaf3f0c6cb06d4c995ef5a7
SSDEEP
384:iI7U37H1uMPTmi4STq8iuTEVGxn60mle7pS0g9t6IByv3QGasuPgQhzcioUo+z3h:iuSlmJD8rTEVqnDp9Mt6GerasJOtoU
Checks for missing Authenticode signature.
resource |
---|
ced383d363fd6ae89b29daec251e1ef9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
GetCurrentProcess
GetComputerNameA
WriteProcessMemory
ReadProcessMemory
ExitProcess
GlobalFree
GlobalUnlock
CreateThread
GlobalAlloc
RtlUnwind
CloseHandle
GetCurrentProcessId
GlobalLock
Sleep
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
FindWindowA
GetWindowThreadProcessId
GetWindowTextA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
mrecv
msend
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ