InjApplicationDll
InjSystemDll
StartMoFei
Static task
static1
Behavioral task
behavioral1
Sample
fb0cbefcb2b5e784dc3acd1822c41a03_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb0cbefcb2b5e784dc3acd1822c41a03_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fb0cbefcb2b5e784dc3acd1822c41a03_JaffaCakes118
Size
64KB
MD5
fb0cbefcb2b5e784dc3acd1822c41a03
SHA1
eeacb88f82474af9fd038af97aca2001442d68c9
SHA256
cfe26ab70973a738352f8acefd04817a15475bb2695e6b58b117fdba895bca50
SHA512
e049f9faf3db4ea930b414cf38579168e903c81420e745645b2c875649ac204a83bb33dc84b335fcf159a3cfa31eb8b757ce9a9b324c10cfbc382813bd77b8f2
SSDEEP
1536:AoA86FkhACN83R2bYcMcPQR166K5YQtMmL/Bk/3FUz6JTIjpv/:NA84/CN83XcMoQX66GMG5k/3Cz6gH
Checks for missing Authenticode signature.
resource |
---|
fb0cbefcb2b5e784dc3acd1822c41a03_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
SetTimer
OpenServiceA
DeleteDC
closesocket
URLDownloadToFileA
_initterm
ICDecompress
capGetDriverDescriptionA
waveInAddBuffer
InjApplicationDll
InjSystemDll
StartMoFei
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE