API����
����_HTTP��Դ��
���ش���
ȡIP��ַ_
���ٴ���
Static task
static1
Behavioral task
behavioral1
Sample
1387a40c9c3a8438c8a693ec34059773_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1387a40c9c3a8438c8a693ec34059773_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
1387a40c9c3a8438c8a693ec34059773_JaffaCakes118
Size
108KB
MD5
1387a40c9c3a8438c8a693ec34059773
SHA1
0737ecfda9314f653bfd947ba5f9ef93f0fcde0e
SHA256
641d670399f10bc369e8619520ff92afd9a9853e1b381f074f249392ab6940bf
SHA512
2ffeaed4c0e8c30ed004b0b1f2e0b653a1c647527d372a0323c0b8823f9d2cf42c52ab13be187ec35baa45b027c650a37e4c8d94b6012edd9340ec4a444e319e
SSDEEP
1536:/4CUKX56dJWytPovFMJ6G3ocADzBX7oXtvBhYDBD2UVB94bgxzYsOTULbJROi0P4:LUKX46yivlhEIAiq5Tu
Checks for missing Authenticode signature.
resource |
---|
1387a40c9c3a8438c8a693ec34059773_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
API����
����_HTTP��Դ��
���ش���
ȡIP��ַ_
���ٴ���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ