MessageHandler
ModuleInitialize
SwitchOff
SwitchOn
Static task
static1
Behavioral task
behavioral1
Sample
3c7ecd8425e3870ae212457cf052950f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c7ecd8425e3870ae212457cf052950f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3c7ecd8425e3870ae212457cf052950f_JaffaCakes118
Size
10KB
MD5
3c7ecd8425e3870ae212457cf052950f
SHA1
58a67132b4b1867d74fa3273bdd3bb101ebcd5a4
SHA256
d05318d73a0248e64dac33a51f61a50068050531d8091432a94c124be9161b9a
SHA512
988a491b939af2c6ea11dec4131286477951fb6564524092b9b595c7386f27926d9c87f08a033ae4d535ae35206000cb298ad40cf1e6e8eae34cbfa61c858838
SSDEEP
192:KVd7zP9KDECAgcdFItBrFhzsbSZ/Iq9jTEWEKtWVigCSNQqo:KVdvl83Q0zsbSS4ZSNQq
Checks for missing Authenticode signature.
resource |
---|
3c7ecd8425e3870ae212457cf052950f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateFileA
CreateProcessA
CreateThread
GetComputerNameA
GetCurrentProcessId
GetFileAttributesA
GetFileSize
GetFullPathNameA
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTickCount
GetVersionExA
GetVolumeInformationA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
MoveFileExA
RtlMoveMemory
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
lstrcatA
lstrcpyA
lstrlenA
CallNextHookEx
CharLowerA
CharUpperA
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA
MessageHandler
ModuleInitialize
SwitchOff
SwitchOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ