imaoe_StartHook
imaoe_StopHook
Static task
static1
Behavioral task
behavioral1
Sample
06dd4cac60980c7925b6b8b7d38acbf8_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
06dd4cac60980c7925b6b8b7d38acbf8_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
06dd4cac60980c7925b6b8b7d38acbf8_JaffaCakes118
Size
48KB
MD5
06dd4cac60980c7925b6b8b7d38acbf8
SHA1
1148705809a49780ef7c64a26e007c7fb66795f7
SHA256
d5a58c519b01d36b06d9d14f71663679ffc4b25d7d219c5aabeaf55b1cd31d07
SHA512
a26ccfc1515067d32c66b6e95fe5a5222146057728804b1c23e03d717133a34f1e48bd3f4d2c94e5ebdd1cdb77d3dacd6cebc62c76fca36d64657074b95f6cd0
SSDEEP
768:IBDm7Lyc2WQ4zMVroiTyt6sfYIJ+9lfmL0:IBDmP3zRiTyt6sfY7l+L0
Checks for missing Authenticode signature.
resource |
---|
06dd4cac60980c7925b6b8b7d38acbf8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
lstrcmpiA
lstrcatA
LocalFree
OutputDebugStringA
LocalAlloc
FreeLibrary
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
HeapAlloc
HeapFree
RtlUnwind
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetWindowTextA
GetClassNameA
GetWindowTextA
SendMessageA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetDlgCtrlID
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
PathRemoveFileSpecA
PathAppendA
imaoe_StartHook
imaoe_StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ