mrecv
msend
Static task
static1
Behavioral task
behavioral1
Sample
ef5fb8dfa96eecc9749d6f44379eb49a_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ef5fb8dfa96eecc9749d6f44379eb49a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ef5fb8dfa96eecc9749d6f44379eb49a_JaffaCakes118
Size
44KB
MD5
ef5fb8dfa96eecc9749d6f44379eb49a
SHA1
92618108de3a68d22122a5218ad2060641e04d5a
SHA256
27b95d1253b140a3126b99d24bcbf6e744b43683c64540571a928f588909d3b5
SHA512
77a53e0c6d0ee3f6fc93a492393ee45344ef132a9a7fa88be2b22260b244a9b6dd1e74d8e909b521fcd946a0452f2b0847369e12a4f13c03aa462f6147e31b7f
SSDEEP
768:WegfispTuT85+nxM429NGKwfdETVBLslM3q:JsuT85+n2JDwmPAl
Checks for missing Authenticode signature.
resource |
---|
ef5fb8dfa96eecc9749d6f44379eb49a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
CreateThread
TerminateThread
GetPrivateProfileStringA
Sleep
CloseHandle
GetCurrentProcess
RtlUnwind
ReadProcessMemory
VirtualProtectEx
WriteProcessMemory
FlushFileBuffers
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
SendMessageA
EnumChildWindows
FindWindowExA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
IsWindowVisible
GetClassNameA
FindWindowA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
mrecv
msend
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ