AM_GetFlags
AM_Install
AM_SetColorData
AM_SetFlags
AM_Uninstall
Static task
static1
Behavioral task
behavioral1
Sample
17f28a342c6761badcf16823754461ff_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
17f28a342c6761badcf16823754461ff_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
17f28a342c6761badcf16823754461ff_JaffaCakes118
Size
10KB
MD5
17f28a342c6761badcf16823754461ff
SHA1
67e5cea3681850e75a948a1a26bf02923da93077
SHA256
1bc40d289b482bac2f0b159257aa7cdd4dd9582ba58dd8ef625d53ad612a4930
SHA512
5916fceb1af236af1f1104dafadadcc969fb7b8b5adfdeba1fb3d03a8b33bcdd7d4c5f3e40e4943b3ef4693d988e0ddf45cde00b104371286405edb3fb0e2d6a
SSDEEP
96:RepxrUjcFJGgCWXa+seYkbIEpeR5afSPKMs9xMq5pBayhMMFFnR45N399:crjJpjhYSFe0SPKMeMqAsLJ45Nt9
Checks for missing Authenticode signature.
resource |
---|
17f28a342c6761badcf16823754461ff_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpiA
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LoadLibraryExW
IsBadReadPtr
VirtualProtect
HeapAlloc
GetProcessHeap
GetCurrentThreadId
GetLocaleInfoA
GetCurrentProcess
WriteProcessMemory
VirtualQuery
GetCurrentProcessId
CreateToolhelp32Snapshot
Module32First
GetModuleHandleA
Module32Next
CloseHandle
GetProcAddress
GetSystemInfo
HeapFree
UnhookWindowsHookEx
PostMessageA
SetWindowsHookExA
CreateCaret
GetKeyboardLayoutList
SendMessageA
DrawTextA
SystemParametersInfoA
DestroyCaret
GetFocus
GetClassNameA
CallNextHookEx
FillRect
GetKeyboardLayout
SetBkMode
SetTextColor
DeleteObject
CreateSolidBrush
CreateCompatibleBitmap
SelectObject
DeleteDC
CreateCompatibleDC
CreateDCA
__dllonexit
_mbsrev
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_onexit
ImageDirectoryEntryToData
AM_GetFlags
AM_Install
AM_SetColorData
AM_SetFlags
AM_Uninstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ