Down
Event1Proc
Init
Up
Static task
static1
Behavioral task
behavioral1
Sample
fcec1a3a5130e4675cb9da1805830867_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcec1a3a5130e4675cb9da1805830867_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
fcec1a3a5130e4675cb9da1805830867_JaffaCakes118
Size
15KB
MD5
fcec1a3a5130e4675cb9da1805830867
SHA1
32891e81c3083e005e729dcd720524cac96813c9
SHA256
e6544a2807d634bfbaf9147a67667fd1e3a8e55af3b8b0b7bb3ff9dedba53650
SHA512
f04f52e7d3266a037ec5d41431b5f60ef2aecb62019cd338919c01ac67ea456d61f6b3793ca19f2d93179bb6aa07ec74f5b7b1931d5bc352d494338218b92498
SSDEEP
384:oqIFRHUA4lYrooIIjulkZOlVL21JwuEzS930Nux:oqAHUMm3Va1iU3+u
Checks for missing Authenticode signature.
resource |
---|
fcec1a3a5130e4675cb9da1805830867_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalMemoryStatus
GlobalUnlock
LoadLibraryA
OpenProcess
Process32First
Process32Next
ReadFile
SetFileAttributesA
SetFilePointer
GlobalLock
Sleep
TerminateProcess
WinExec
WriteFile
_lwrite
lstrcatA
lstrcmpiA
lstrlenA
GlobalFree
GlobalAlloc
GetVersion
GetTempPathA
CloseHandle
GetSystemDirectoryA
GetProcAddress
GetLogicalDriveStringsA
GetFileSize
GetFileAttributesA
GetComputerNameA
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateToolhelp32Snapshot
CreateThread
CreateFileA
CopyFileA
SetFileTime
CallNextHookEx
FindWindowA
GetDC
GetWindowThreadProcessId
wsprintfA
ReleaseDC
SendMessageA
SetWindowsHookExA
UnhookWindowsHookEx
PostMessageA
GetSystemMetrics
WSACleanup
WSAStartup
closesocket
connect
gethostbyname
gethostname
htons
inet_addr
socket
send
recv
inet_ntoa
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
GetUserNameA
ShellExecuteA
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
DeleteDC
GetDIBits
GetDeviceCaps
GetObjectA
GetStockObject
RealizePalette
SelectObject
SelectPalette
Down
Event1Proc
Init
Up
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ