GetMsgProc
SetHook
Static task
static1
Behavioral task
behavioral1
Sample
2adbb9d97e952944bd3b8f03a703349c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2adbb9d97e952944bd3b8f03a703349c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2adbb9d97e952944bd3b8f03a703349c_JaffaCakes118
Size
108KB
MD5
2adbb9d97e952944bd3b8f03a703349c
SHA1
4114025533001441f91dd4ea291bff3432c1ae25
SHA256
d830ad0b22ec06a206cef43f31c9b68cadb824aecde1bca86dbbbdad723e8828
SHA512
571efea87a6231fc50eec1955083b457abbd9fe99f13d706b964907e6f38327e2316b641c51d4e1b3696b58137e3727f828852854e8593ecce73773ce9068243
SSDEEP
1536:PWkAUlE7dTekeOWdH5a1LXcoIsT3c8vl7gR6L09j8JoL2Ktx19OEh9ZZdsmGDJlV:PjYXCl5a1LcGGqKtj9OEh9ZZd9GDJll
Checks for missing Authenticode signature.
resource |
---|
2adbb9d97e952944bd3b8f03a703349c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMutexA
ReleaseMutex
WideCharToMultiByte
ExitProcess
FreeLibrary
ResetEvent
SetEvent
CreateEventA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GetLastError
GetOverlappedResult
DeviceIoControl
WaitForMultipleObjects
OpenEventA
CreateFileA
Sleep
WriteProcessMemory
RemoveDirectoryA
DeleteFileA
WritePrivateProfileStringA
FindClose
FindFirstFileA
GetSystemDirectoryA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
OpenProcess
DisableThreadLibraryCalls
VirtualAllocEx
CreateRemoteThread
VirtualFreeEx
GetCurrentProcess
CloseHandle
WaitForSingleObject
IsBadStringPtrA
GetVersionExA
GetModuleFileNameA
GetCurrentProcessId
LoadLibraryExW
LoadLibraryExA
LoadLibraryW
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetSystemInfo
GetProcAddress
IsBadReadPtr
VirtualQuery
GetPrivateProfileStringA
LCMapStringW
RtlUnwind
RaiseException
ExitThread
GetCurrentThreadId
CreateThread
ResumeThread
ReadFile
SetFilePointer
GetFileType
GetCommandLineA
HeapAlloc
InterlockedExchange
HeapFree
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
HeapReAlloc
TerminateProcess
HeapSize
WriteFile
FlushFileBuffers
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetStartupInfoA
SetStdHandle
SetEndOfFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetLocaleInfoA
LCMapStringA
CallNextHookEx
PostMessageA
RegisterWindowMessageA
RegEnumValueA
RegDeleteValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
ControlService
CreateServiceA
OpenServiceA
StartServiceA
DeleteService
QueryServiceStatus
CloseServiceHandle
OpenSCManagerA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
ImageDirectoryEntryToData
GetMsgProc
SetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ