Install
Uninstall
Static task
static1
Behavioral task
behavioral1
Sample
1b4dee88c74e0f27bf957334902e6c79_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b4dee88c74e0f27bf957334902e6c79_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1b4dee88c74e0f27bf957334902e6c79_JaffaCakes118
Size
27KB
MD5
1b4dee88c74e0f27bf957334902e6c79
SHA1
9d590889ef06a7f5c0540ec8df0db3ef1852089e
SHA256
9b6ec3fea631a496534ec002bdafd0feedf4f4c2c37277e1b227c3f5b1349f2c
SHA512
36b3aae2ccf465c6ec899b8b36e2f83eebb6c3d71fb73f33f3c56ee58837a03066ba5a67665c9fd2a9cfbde6fa16c3324a09928409ad394b1eaae9f050bd31f8
SSDEEP
384:DFQOmS0cwQDm16s18ucxWMzuSk2NRZcobihvbGY0WYzF2b0oYYvlyrwY063BHBYm:DVhagaMqSkscEi8aYZ60oZvlBJACUP
Checks for missing Authenticode signature.
resource |
---|
1b4dee88c74e0f27bf957334902e6c79_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTempPathA
CloseHandle
GetFileAttributesW
ReadProcessMemory
VirtualQueryEx
WideCharToMultiByte
ReadFile
GetFileSize
CreateFileA
Thread32Next
TerminateThread
Thread32First
CreateToolhelp32Snapshot
SetFilePointer
HeapAlloc
GetProcessHeap
DeleteFileA
GetLastError
FindClose
FindFirstFileA
GetPrivateProfileStringA
OpenProcess
TerminateProcess
GetCurrentProcess
GetCurrentProcessId
Sleep
GetModuleHandleA
GetProcAddress
CreateThread
FreeLibrary
GetModuleFileNameA
GetWindowsDirectoryA
LoadLibraryA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetClassNameW
wsprintfA
GetForegroundWindow
GetWindowThreadProcessId
GetWindowTextA
GetWindow
GetWindowRect
GetDC
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
_strcmpi
_strupr
free
strcpy
memset
malloc
sprintf
??3@YAXPAX@Z
wcscmp
??2@YAPAXI@Z
fclose
ftell
fseek
fopen
mbstowcs
strstr
rand
srand
time
wcslen
wcsncat
wcscpy
wcsstr
strncpy
exit
memcpy
_except_handler3
strrchr
strlen
_local_unwind2
tolower
_vsnprintf
InternetCloseHandle
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
CreateDCA
DeleteObject
Install
Uninstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ