GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
Static task
static1
Behavioral task
behavioral1
Sample
f7e6610f639a84656330f278035e19c5_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f7e6610f639a84656330f278035e19c5_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f7e6610f639a84656330f278035e19c5_JaffaCakes118
Size
56KB
MD5
f7e6610f639a84656330f278035e19c5
SHA1
653c8502e5665859d98cd51efae6af07bd523730
SHA256
1523f753affb5d6da8bd22668e184dcdd919a25d3e65835a1e13e40ef567d294
SHA512
621ca94bf62504ebc9f2965bad76831bb655c312b6faa831fe48e5cdcbdc0bc2fa23fab6ac14889055b9c5db83a8d9032e1a26f557a2d54016193bc42c94c0ce
SSDEEP
384:sC6QK6SF3zFlnKuPeqDhzgeNkavJ4CJpf1Cy8SNojXZy+nNXkkXJ949Tp1DcXAnO:FUz7/Gq9gyT/aB1F59icXKrE
Checks for missing Authenticode signature.
resource |
---|
f7e6610f639a84656330f278035e19c5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImmGetContext
ImmGetCompositionStringA
ImmReleaseContext
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
OutputDebugStringA
WideCharToMultiByte
GetTickCount
HeapAlloc
OpenProcess
ReadProcessMemory
VirtualQueryEx
CopyFileA
GetPrivateProfileStringA
GlobalLock
GlobalFree
GlobalUnlock
GlobalHandle
GlobalAlloc
GetSystemDirectoryA
GetFileInformationByHandle
GetModuleFileNameA
WriteFile
CloseHandle
CreateFileA
GetLocalTime
GetTempPathA
ReadFile
GetFileSize
GetCurrentProcess
GetProcAddress
LoadLibraryA
InterlockedExchange
Sleep
CreateThread
DeleteFileA
GetModuleHandleA
GetProcessHeap
HeapFree
GetCurrentThreadId
GetCurrentProcessId
CreateFileMappingA
PeekMessageA
GetWindowLongA
TranslateMessage
DispatchMessageA
FindWindowExA
GetKeyState
GetFocus
GetDC
GetForegroundWindow
GetWindowTextA
GetWindowThreadProcessId
SetRect
ReleaseDC
CallNextHookEx
UnhookWindowsHookEx
DeleteObject
BitBlt
GetDeviceCaps
SelectObject
GetObjectA
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIFileOpenA
AVIFileInit
AVISaveOptionsFree
AVIFileRelease
AVIStreamRelease
AVIFileExit
AVIStreamWrite
AVIStreamSetFormat
ord2
_strlwr
localtime
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
printf
strncmp
fseek
fopen
fclose
strlen
memset
strstr
strcpy
??3@YAXPAX@Z
time
rename
rand
srand
_mkdir
_access
sprintf
??2@YAPAXI@Z
memmove
memcpy
__CxxFrameHandler
strchr
abs
strftime
_memicmp
memcmp
strcmp
strcat
vsprintf
strncpy
wcslen
atol
atoi
strrchr
fflush
fwrite
HttpSendRequestA
SHGetValueA
SHSetValueA
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ