fa
fb
Static task
static1
Behavioral task
behavioral1
Sample
0f182363654c9011364418acc6b6d47e_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f182363654c9011364418acc6b6d47e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0f182363654c9011364418acc6b6d47e_JaffaCakes118
Size
6KB
MD5
0f182363654c9011364418acc6b6d47e
SHA1
a0d9acdcfb7f1e2d7aa7d0dd4b8f45aad655281e
SHA256
8604df6d9edb84197042fc35a901a2f094b1ef663cc893559f5b5a30969589a0
SHA512
9d6d1717d79bca86bd4b53a0c27dc2ab6f16dff92373ad7affb7b232a116ff619d5ba41ed61946a9f52d99f7a740be481060da5929d1bfc844600190aea29180
SSDEEP
96:ldBVwNrTepGhpICnUW6jdlkmXf1m60afjBQK+9:lDVwNTeIpwdl1v1Zja/
Checks for missing Authenticode signature.
resource |
---|
0f182363654c9011364418acc6b6d47e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
Sleep
GetCommandLineA
GetModuleHandleA
VirtualProtectEx
GetModuleFileNameA
GetCurrentProcess
CreateThread
GetKeyboardState
ToAscii
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
_initterm
_adjust_fdiv
malloc
strrchr
strcpy
strcmp
strcat
sprintf
strncpy
strstr
strlen
memcpy
free
_stricmp
InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle
fa
fb
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ