AddProcessExclusion
GetChangeRect
GetChangedWindowList
IsTitleBarButtonPressed
RemoveProcessExclusion
SetButtonXOffset
SetSingleWindow
ShowTitleBarButton
StartHooks
StopHooks
Behavioral task
behavioral1
Sample
ea957c4cea2e37962419b26f49b39149_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea957c4cea2e37962419b26f49b39149_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ea957c4cea2e37962419b26f49b39149_JaffaCakes118
Size
156KB
MD5
ea957c4cea2e37962419b26f49b39149
SHA1
cffcd00de7c84ecec440e35b1fed8b3d50dc2444
SHA256
7d6116e0ffe725af4b33312d2dbaaeba5ce2e970c81a8f9c5650970a3a1e8579
SHA512
3a1a8a6f05c4466f8b94c6379d29bbfe536fc3ea42054daa069eb4e968797f9867fc056c08eb4a2d10e0fbd4b8479302f1844f66d3d81c8c4437427d1a34fe9f
SSDEEP
768:lLCi00PldjWVNinBL0SCPd94vHmA98uGhW:DMvSCUHt8i
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ea957c4cea2e37962419b26f49b39149_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateDirectoryW
CreateFileA
CreateFileW
CreateFileMappingA
CreateProcessA
CreateThread
DeleteFileA
ExitProcess
ExitThread
FindFirstFileA
FindNextFileA
FreeLibrary
GetFileSize
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetSystemDirectoryA
GlobalAlloc
GlobalFree
HeapAlloc
LoadLibraryA
LocalAlloc
LocalFree
MapViewOfFile
MoveFileA
MoveFileExA
OpenFileMappingA
RemoveDirectoryA
SetFilePointer
Sleep
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WriteFile
lstrcatA
lstrcmpA
lstrcmpW
lstrcpyA
CreateDialogParamW
CreateWindowExW
DefWindowProcW
ExitWindowsEx
FindWindowW
GetAsyncKeyState
GetClassInfoExW
GetCursorPos
GetDlgItem
IsDialogMessageW
IsWindowVisible
KillTimer
RegisterClassExW
SendMessageA
SetLayeredWindowAttributes
SetTimer
SetWindowLongA
SetWindowTextW
ShowWindow
wsprintfA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
FtpCreateDirectoryA
FtpPutFileA
FtpSetCurrentDirectoryA
HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
WinVerifyTrust
SHGetFolderPathA
ShellExecuteA
StrRChrA
RtlAdjustPrivilege
AddProcessExclusion
GetChangeRect
GetChangedWindowList
IsTitleBarButtonPressed
RemoveProcessExclusion
SetButtonXOffset
SetSingleWindow
ShowTitleBarButton
StartHooks
StopHooks
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE