UnHook
installhook
Static task
static1
Behavioral task
behavioral1
Sample
f9ed7866bac0159cf227fe5262c3fece_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9ed7866bac0159cf227fe5262c3fece_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f9ed7866bac0159cf227fe5262c3fece_JaffaCakes118
Size
240KB
MD5
f9ed7866bac0159cf227fe5262c3fece
SHA1
3023e335c91dfaf08cde74a1329af357db692c09
SHA256
7ff15a7844487ed6e04ef295e6ab55345f3d8d75c4bfac33bcf09473ca29aff4
SHA512
88d2baeffb8264acfe245b52668aa8fa0a4231d3b539a954e2dace846c243198d254e590ef244c984322f4f575155130713a216ac169c067c6ed0d2f4d1d5357
SSDEEP
3072:bFa1henWLvsXXy7FoTXxqYCh5IJZzeou+p:bFa1hencsy7FQXQ/o
Checks for missing Authenticode signature.
resource |
---|
f9ed7866bac0159cf227fe5262c3fece_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionExA
CreateThread
OpenProcess
GetVersion
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
CloseHandle
UnmapViewOfFile
WriteProcessMemory
ReadProcessMemory
GetProcAddress
LoadLibraryA
GetPrivateProfileIntA
lstrcatA
GetSystemDirectoryA
WritePrivateProfileStringA
Process32Next
TerminateProcess
Process32First
CreateToolhelp32Snapshot
GetPrivateProfileStringA
FreeLibrary
Sleep
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
LCMapStringW
LCMapStringA
ReadFile
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetFilePointer
CreateFileA
FlushFileBuffers
SetStdHandle
VirtualAlloc
HeapReAlloc
HeapAlloc
SetConsoleCtrlHandler
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
RtlUnwind
GetCommandLineA
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
ExitProcess
GetCurrentProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
EnterCriticalSection
LeaveCriticalSection
GetLastError
InitializeCriticalSection
DeleteCriticalSection
FatalAppExitA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
SetEnvironmentVariableA
SendMessageA
FindWindowExA
FindWindowA
SetTimer
wsprintfA
KillTimer
GetWindow
PostMessageA
SetWindowTextA
IsWindowVisible
GetClassNameA
EnumChildWindows
GetClientRect
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
InternetCloseHandle
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetReadFile
InternetOpenUrlA
InternetOpenA
inet_addr
send
shutdown
recv
WSACleanup
inet_ntoa
gethostbyname
gethostname
WSAStartup
UnHook
installhook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ