DLD
LSD_F3
Static task
static1
Behavioral task
behavioral1
Sample
fb0e281f91bf4c4dae2966b5cf3ce100_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb0e281f91bf4c4dae2966b5cf3ce100_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fb0e281f91bf4c4dae2966b5cf3ce100_JaffaCakes118
Size
17KB
MD5
fb0e281f91bf4c4dae2966b5cf3ce100
SHA1
f3e11f76fe782d63098f4a38de102e715988f1a7
SHA256
6eafd12e3e110060f98ff3adf04d8c1e7ae30291abc1dc776e86601a9944f40b
SHA512
c895aab468a13a53e2a521373be7b5e16649ef82ec425a87b7017588bdf5bfde2b0584742e5345b3095c766e07fc31c956d2c4594e9ce5fbee6279eb31754134
SSDEEP
384:ozcuszranjwwiZM6o56Pj8l2vAhKkzBQwXUCusrcFLKt:GIgvRUCt
Checks for missing Authenticode signature.
resource |
---|
fb0e281f91bf4c4dae2966b5cf3ce100_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetDlgItemTextA
GetWindowTextA
GetForegroundWindow
ShowWindow
SetDlgItemTextA
wsprintfA
GetClassNameA
EnumChildWindows
EndDialog
DialogBoxIndirectParamA
GetDlgItem
OpenProcess
LockResource
ord5
LoadLibraryA
LoadResource
lstrlenA
CloseHandle
CreateFileA
CreateThread
DeviceIoControl
ExitThread
FindResourceA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
RtlZeroMemory
Sleep
VirtualProtectEx
_lread
lstrcatA
VirtualAlloc
_llseek
OpenProcess
LockResource
ord5
LoadLibraryA
LoadResource
lstrlenA
CloseHandle
CreateFileA
CreateThread
DeviceIoControl
ExitThread
FindResourceA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
RtlZeroMemory
Sleep
VirtualProtectEx
_lread
lstrcatA
VirtualAlloc
_llseek
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
closesocket
connect
gethostbyname
send
socket
WSACleanup
WSAStartup
DLD
LSD_F3
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ