Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
2e4a7bc819b8ddf670083cef8158e166_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e4a7bc819b8ddf670083cef8158e166_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e4a7bc819b8ddf670083cef8158e166_JaffaCakes118
Size
18KB
MD5
2e4a7bc819b8ddf670083cef8158e166
SHA1
5b9d0e3e5abc75fadacbc872fef3de7fc1325629
SHA256
148f3b86446078b419a8782560954c910b8a9eafa2f1b5e2bece269439d27a24
SHA512
a161d2d97acd55125fde604a658b81388463b63a1738bb6f4bd6ae303432fb9e1213c47d56580cfbbd86da451cf55a7a120ca036f88411f8b444c4ab6cdfd3c5
SSDEEP
384:vSPVF35Yq2DEantv7n9Xk0MbvZZ4OP97ofIy1hGNTTdv3fhRexPySyMDNj:SGjv7n900Mbb5i1hGpdfflIJ
Checks for missing Authenticode signature.
resource |
---|
2e4a7bc819b8ddf670083cef8158e166_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
IsBadReadPtr
lstrcpyA
lstrcmpA
ExitProcess
lstrcmpiA
Sleep
lstrlenA
GetTickCount
lstrcpynA
WritePrivateProfileStringA
GetSystemTime
GetTempPathA
GetPrivateProfileStringA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
CreateThread
UnmapViewOfFile
OutputDebugStringA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ