Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
37ed277a2e92217fd3c9dcf6fb962e47_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
37ed277a2e92217fd3c9dcf6fb962e47_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
37ed277a2e92217fd3c9dcf6fb962e47_JaffaCakes118
Size
18KB
MD5
37ed277a2e92217fd3c9dcf6fb962e47
SHA1
490e96b2677ecfa0f8f77379dc39de093b42bfc7
SHA256
8f16adbb94180596922eed0ad2f7665f2b4674c4df2490b6f5b3d5e07ab6e6a8
SHA512
24a55dd3926380c0a712fc53a21e89ce4f40179fa009eed6cb1fe5d41997a4ce63e6e994cd6ead74ee651261402af4051cb4b66e1d06a28ff72a08e7f8c11d60
SSDEEP
384:F4qY9QisysXlm0RE/vA3NISgcdik9+0TWc8KOYzPNOA:gLqPS/YdISgmChYzPEA
Checks for missing Authenticode signature.
resource |
---|
37ed277a2e92217fd3c9dcf6fb962e47_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
ExitProcess
lstrcpyA
lstrcmpA
Sleep
lstrlenA
lstrcmpiA
GetTickCount
lstrcpynA
WideCharToMultiByte
GetSystemTime
GetPrivateProfileStringA
CloseHandle
ReadFile
CreateFileA
CreateThread
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
OutputDebugStringA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
RtlUnwind
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ