InstGetMsg
MyCallWndProc
Behavioral task
behavioral1
Sample
229ebe55d531e86634278fb73cab7827_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
229ebe55d531e86634278fb73cab7827_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
229ebe55d531e86634278fb73cab7827_JaffaCakes118
Size
72KB
MD5
229ebe55d531e86634278fb73cab7827
SHA1
2421a0214b3661ed6302c8d234618eab0727093c
SHA256
a1bb18d8e18d0f77b0cb0aa0ba9921919e24308ab1bfab9ce64ecf580f8626c5
SHA512
0afb40808893b80df12d675049ebd7feb47a1669bab58d6f6c173fc870b31c0ef9561db0a71b2d19a2559d9739d0ec64ff8f3631a4fdb38fb477ebcbd1ff6631
SSDEEP
384:Es9OjiFq1GUFm7B/+vIhpLF2b7u7xvtoUY4XE1/05QHWAPCWGgJMc:AW7OIjLQKYUE1/x7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
229ebe55d531e86634278fb73cab7827_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
lstrcpynA
OpenProcess
GetVersionExA
CreateThread
CreateMutexA
GetLastError
GetSystemDirectoryA
GetTickCount
Sleep
WriteProcessMemory
ReadProcessMemory
GetCurrentProcess
LoadLibraryA
GetProcAddress
??3@YAXPAX@Z
isdigit
isalpha
fclose
_strdup
_strupr
_adjust_fdiv
_initterm
strchr
free
realloc
malloc
fscanf
fopen
sprintf
fprintf
??2@YAPAXI@Z
__CxxFrameHandler
atoi
memmove
_ftol
UnhookWindowsHookEx
GetWindow
wsprintfA
IsWindowVisible
GetForegroundWindow
SetWindowsHookExA
CallNextHookEx
GetWindowThreadProcessId
FindWindowExA
FindWindowA
SetTimer
GetWindowTextLengthA
ShowWindow
SetWindowTextA
KillTimer
SendMessageA
GetWindowTextA
GetClassNameA
InstGetMsg
MyCallWndProc
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE