getVersion
startPayLoad
stopPayLoad
Overview
overview
3Static
static
3trojan-mas...ex.dll
windows7-x64
3trojan-mas...ex.dll
windows10-2004-x64
3trojan-mas...xec.js
windows7-x64
3trojan-mas...xec.js
windows10-2004-x64
3trojan-mas...ass.js
windows7-x64
3trojan-mas...ass.js
windows10-2004-x64
3trojan-mas...ass.js
windows7-x64
3trojan-mas...ass.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
trojan-master/2003/index.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
trojan-master/2003/index.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
trojan-master/dll/source/CCmdExec.js
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
trojan-master/dll/source/CCmdExec.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
trojan-master/shared/include/CHTTPClass.js
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
trojan-master/shared/include/CHTTPClass.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
trojan-master/shared/source/CHTTPClass.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
trojan-master/shared/source/CHTTPClass.js
Resource
win10v2004-20240802-en
Target
ded0ffc2553aa1995f28790a9d0a9c76_JaffaCakes118
Size
66KB
MD5
ded0ffc2553aa1995f28790a9d0a9c76
SHA1
aaadb360f225d4b058658310f59da3637b0b83b9
SHA256
6dbcb72e386958ba0db559755dd11c31bfb2ca862c6a537ef627879f0a81aa5d
SHA512
758720f9f55a54cb00387f61adf426caf73edc4943719a0eb9b25c9e5ddb62c702e9973b786f68f505dab27f18416aab1f6605b2491fe66a552f7a7b10173133
SSDEEP
768:KYzdhp9Tw8IhCOchQMpUfwYpASwYt34k/92M2BTk9CI8h51TFxQsfbGc1lirrkiU:KmdJO8Q5f7r2lhh5j+szGGliMiHRrfMP
Checks for missing Authenticode signature.
resource |
---|
unpack001/trojan-master/2003/index.cst |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AddAtomA
CloseHandle
CreatePipe
CreateProcessA
CreateSemaphoreA
CreateThread
FindAtomA
FreeLibrary
GetAtomNameA
GetExitCodeProcess
GetExitCodeThread
GetLastError
GetProcAddress
GetVersionExA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
ReadFile
ReleaseSemaphore
SetLastError
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
lstrcpyA
lstrlenA
__dllonexit
_assert
_errno
_iob
_sleep
_stricmp
abort
calloc
fclose
fflush
fopen
fprintf
fread
free
fwrite
malloc
memcpy
memset
printf
rand
remove
sprintf
srand
strcat
strchr
strcmp
strcpy
strlen
strncmp
strncpy
strstr
strtok
time
MessageBoxA
getVersion
startPayLoad
stopPayLoad
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ