install
uninstall
Static task
static1
Behavioral task
behavioral1
Sample
3e840a7833c9722ee45abfe049dbe3c7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e840a7833c9722ee45abfe049dbe3c7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e840a7833c9722ee45abfe049dbe3c7_JaffaCakes118
Size
106KB
MD5
3e840a7833c9722ee45abfe049dbe3c7
SHA1
11b7be1d477028a2ea5bde3ebfc2e3f26a331752
SHA256
461736e626cd7d31a060fc3deffe4715365f0784272ba0701e413ba46d79bee1
SHA512
e6c57d214046f95e09a82e6e49676096aee425da84d2cfafdd40e711fe5af44833268ab7dd1bcafa89e67cef19fc61fb89d1561834dd69d4eec08b9b5e4ef628
SSDEEP
1536:zsykTAHzexenV4WeLI43I+H20tFfpAJjiWWAACqlhdpKByfLLFrKJTZjiyZ9AJCp:z9e44WeLzRH20tIOWXACqwmFr4Oc
Checks for missing Authenticode signature.
resource |
---|
3e840a7833c9722ee45abfe049dbe3c7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetKeyboardType
DestroyWindow
MessageBoxA
UnhookWindowsHookEx
SetWindowsHookExA
PostMessageA
MessageBoxA
GetWindowThreadProcessId
CallNextHookEx
GetACP
Sleep
VirtualFree
VirtualAlloc
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
VirtualQuery
GetStartupInfoA
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
OpenFileMappingA
MapViewOfFile
LoadLibraryA
IsBadReadPtr
GetModuleHandleA
GetCurrentProcessId
FreeLibrary
CloseHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
install
uninstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ