FlushBuffer
SaveE
SetLOpt
StartL
StopL
WLELock
WLELogoff
WLELogon
WLEShutdown
WLEStartScreenSaver
WLEStartup
WLEStopScreenSaver
WLEUnlock
Static task
static1
Behavioral task
behavioral1
Sample
ed2035226f5d3a5ede64b4ee1785b97c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed2035226f5d3a5ede64b4ee1785b97c_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ed2035226f5d3a5ede64b4ee1785b97c_JaffaCakes118
Size
15KB
MD5
ed2035226f5d3a5ede64b4ee1785b97c
SHA1
b4bca120653d2124fe944719a93037df9c350438
SHA256
d56789a1beac3d815e8639aab794b78bdc666e941691c2c5f3a2f080791feeeb
SHA512
1ac6a60e6652d1c28a1672390fb91b523da6d00becab9693f89a7d1262d71476f70725b139f85c894773d8644fd65b881f57f80535de9b69b6b2969144664ffd
SSDEEP
192:SC0itFaWlB2SYxmJzTQsoHImVigU6d984blsckwLsBb/d6T+z9SCqGfFMKh:SCb662ZWzh3ws1Jb/KU9SCq8FMKh
Checks for missing Authenticode signature.
resource |
---|
ed2035226f5d3a5ede64b4ee1785b97c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strcat
strcpy
_mbsnbcmp
strftime
localtime
time
sprintf
_mbsnbcpy
_mbscmp
memcpy
fclose
fwrite
??3@YAXPAX@Z
memset
_mbsrchr
memmove
??2@YAPAXI@Z
??1type_info@@UAE@XZ
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_CxxThrowException
_EH_prolog
strlen
__CxxFrameHandler
fopen
??0exception@@QAE@ABV0@@Z
WideCharToMultiByte
GetModuleFileNameA
DisableThreadLibraryCalls
SetFileAttributesA
CloseHandle
CreateProcessAsUserA
GetWindowTextA
GetForegroundWindow
SetWindowsHookExA
UnhookWindowsHookEx
GetKeyState
GetAsyncKeyState
CallNextHookEx
FlushBuffer
SaveE
SetLOpt
StartL
StopL
WLELock
WLELogoff
WLELogon
WLEShutdown
WLEStartScreenSaver
WLEStartup
WLEStopScreenSaver
WLEUnlock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ