GetPluginInfo
GetPluginResult
GetPluginRun
PluginFunc
PluginStap
Static task
static1
Behavioral task
behavioral1
Sample
3bcc7c4faa9f2412036744d659933acb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3bcc7c4faa9f2412036744d659933acb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3bcc7c4faa9f2412036744d659933acb_JaffaCakes118
Size
36KB
MD5
3bcc7c4faa9f2412036744d659933acb
SHA1
8ff9a4e54d7901d513f83168c44dc7333809ea97
SHA256
9eb1e318f2196b677a8ee35ece4ca775452e5391fab276dcdfbc7111e299998d
SHA512
6267dcb3b46b72bbf773ad1436d2d6a3b955f845f1dba7b4a6829f3eba1d29018c466affbf72f063f07cbf4700ebc6f25df3f8c2a0f498b7ee08732ddb19dfbd
SSDEEP
768:fhZaoi8p1m+LEQLT6Ua1KDoFKbdwAlJcMTx8HiI1:fhZe8pLja1K35HJcbHb
Checks for missing Authenticode signature.
resource |
---|
3bcc7c4faa9f2412036744d659933acb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
UnhookWindowsHookEx
ImmGetCompositionStringA
RegQueryValueExA
SysFreeString
GetPluginInfo
GetPluginResult
GetPluginRun
PluginFunc
PluginStap
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE