_������_���±�����_������
���±�_�����ı�
���±�_�½�
�ӿ�_��������
�ӿ�_ȡ�汾��
�ӿ�_�ƶ�����
Static task
static1
Behavioral task
behavioral1
Sample
43a714ab0fa72eec45ec14ed3404da06_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
43a714ab0fa72eec45ec14ed3404da06_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
43a714ab0fa72eec45ec14ed3404da06_JaffaCakes118
Size
149KB
MD5
43a714ab0fa72eec45ec14ed3404da06
SHA1
1d08ad7c10f59092b49b0bf36b71931ff8d59845
SHA256
a04014e80818836a0f32cf9354f7de50bcb01798e45492be791e7e2cc248d7cd
SHA512
7aa0dd89b5b98cdd008fa961b04f9321b702d241b840fc63df624cfabbfbd19723618d4dcbe0bacdf42046be30871d4fa1611f871ffd13cf29bf5eaf597a2129
SSDEEP
1536:ONAYo+A1gC/T+lbnUpKC4YUtvv+iAbq0YDQLbzvI9utDMYvSTl5T40KdrwxSj6Ig:ONzoz/7Upm7WgMYGQjDg
Checks for missing Authenticode signature.
resource |
---|
43a714ab0fa72eec45ec14ed3404da06_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
_������_���±�����_������
���±�_�����ı�
���±�_�½�
�ӿ�_��������
�ӿ�_ȡ�汾��
�ӿ�_�ƶ�����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ