HookProc
InstallHook
RemoveHook
Static task
static1
Behavioral task
behavioral1
Sample
23c26093f5efc0c7d547e2a691778ea8_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
23c26093f5efc0c7d547e2a691778ea8_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
23c26093f5efc0c7d547e2a691778ea8_JaffaCakes118
Size
1.3MB
MD5
23c26093f5efc0c7d547e2a691778ea8
SHA1
9af0b5570babcc86f0754d022da8d3b710d61ed3
SHA256
fc62e9c23136a2996abf02851c49c8856b9e7daad9e95bcc645c9e55d4acf2af
SHA512
e2ef542d3f838e8418e8de313f5405ab87dc0ca83c8c4ca2a45c9a05ed44a8d13e1ad920fb85a9446461cbcdc6205ef7da72c294ad413fbbe27bea989f8473ee
SSDEEP
3072:cFNW6Fotei0Gj3/tDT7tj9m61+wYnXPo8mMhKilUa:2WlC2Ptztjs6QoP0
Checks for missing Authenticode signature.
resource |
---|
23c26093f5efc0c7d547e2a691778ea8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IsBadWritePtr
OutputDebugStringA
lstrcmpiA
VirtualProtect
VirtualQuery
GetVersionExA
GetModuleHandleA
WideCharToMultiByte
DisableThreadLibraryCalls
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
RtlUnwind
GetCommandLineA
GetVersion
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW
SetWindowsHookExA
CallNextHookEx
FindWindowA
GetWindowThreadProcessId
UnhookWindowsHookEx
HookProc
InstallHook
RemoveHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ