Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
2d01b54bb848c9315f2e79b98f12de99_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d01b54bb848c9315f2e79b98f12de99_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d01b54bb848c9315f2e79b98f12de99_JaffaCakes118
Size
15KB
MD5
2d01b54bb848c9315f2e79b98f12de99
SHA1
516c41a852f7e441a5b5b61ae6caaf889a72b3a5
SHA256
744137021bd6f8998fb4cd715b46c0d2e74dde37d5fbe86ad63d898b98e6b8df
SHA512
ee7fe92ea0c51daedd3bc1357200e82baa7a0c77f6bfdbeb9644790d5c3e1e8e3526b0b98f49737ab63bca98c21a1847549d2e6e2386b15a15034735dca10e16
SSDEEP
384:PyFVEMNH7veljvrwu4TPvoEsIdySfZDAK:AVEMZelgPwBAEK
Checks for missing Authenticode signature.
resource |
---|
2d01b54bb848c9315f2e79b98f12de99_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyA
lstrcatA
lstrlenA
GetTickCount
lstrcpynA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
WritePrivateProfileStringA
GetTempPathA
ExpandEnvironmentStringsA
GetPrivateProfileStringA
Sleep
GetModuleHandleA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
CreateThread
UnmapViewOfFile
OutputDebugStringA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
lstrcmpiA
ExitProcess
lstrcmpA
GetModuleFileNameA
VirtualProtect
PostThreadMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ