Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
391afd5f4c7ab620b160df4fe1af3e77_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
391afd5f4c7ab620b160df4fe1af3e77_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
391afd5f4c7ab620b160df4fe1af3e77_JaffaCakes118
Size
17KB
MD5
391afd5f4c7ab620b160df4fe1af3e77
SHA1
1feabf543c5aad57de61ab3e50d57496bef1dd64
SHA256
61f3436813a62bde9cafeb7d7408d0d731d4ec48b7791fa5579bde6bf6a0104b
SHA512
80531ad683c2b02e8c58ffd89bf15bfa6d5d532dedfa8e2cd31397677ecc4853bea8c3732430b454a9da1b5dfd820b1a85526bd4308e90ec18d00288a303269f
SSDEEP
384:AQSYFAW8EoW9Pgf5i4Bc+nyDFhJUik4jKOw0oMk:37gf5/TyzJhhw0ob
Checks for missing Authenticode signature.
resource |
---|
391afd5f4c7ab620b160df4fe1af3e77_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
Sleep
lstrcpyA
lstrcmpA
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
GetSystemTime
GetPrivateProfileStringA
CloseHandle
ReadFile
CreateFileA
CreateThread
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
OutputDebugStringA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
RtlUnwind
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ