InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
Static task
static1
Behavioral task
behavioral1
Sample
401e95a35d9618f7c157039fdda42f61_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
401e95a35d9618f7c157039fdda42f61_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
401e95a35d9618f7c157039fdda42f61_JaffaCakes118
Size
26KB
MD5
401e95a35d9618f7c157039fdda42f61
SHA1
425969a9f5c571970bd2f9e81153ba4b9b218985
SHA256
95cfd6b1f8f791df307e709daf6763a406be86607717b0cd6b0bccfa46c42dba
SHA512
2459fbc916544ca147972f2710f6721dd2935c68cd096c11ecb60aeb61723eb059ed2af285e5e757c5cc1bfcbb56a84e0f30437e732b66789af161e785eb31f7
SSDEEP
384:HQVltxq9gmZRfT8XDdwwTxhNJZgCVd/GvXzzfA6z8f63NydLPx9XOc4nUMiB:clCgqfTshNfffGPzzoI3NGn4fiB
Checks for missing Authenticode signature.
resource |
---|
401e95a35d9618f7c157039fdda42f61_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
GetFileSize
ReadFile
CreateFileA
DeleteFileA
MultiByteToWideChar
GlobalFree
GlobalUnlock
WriteFile
GlobalLock
GlobalAlloc
GetTempPathA
lstrcpynA
Process32First
CreateToolhelp32Snapshot
CreateThread
GetCommandLineA
GetModuleFileNameA
GetPrivateProfileStringA
GetCurrentProcessId
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
GetTickCount
lstrcmpiA
lstrlenA
Sleep
lstrcmpA
lstrcpyA
ExitProcess
GetSystemDirectoryA
lstrcatA
LoadLibraryA
GetProcAddress
FreeLibrary
Process32Next
OutputDebugStringA
UnhookWindowsHookEx
SetWindowsHookExA
EnumWindows
GetSystemMetrics
GetWindowTextA
IsWindowVisible
IsIconic
ReleaseDC
PostThreadMessageA
IsRectEmpty
GetWindowThreadProcessId
FindWindowExA
FindWindowA
PrintWindow
GetWindowInfo
SetForegroundWindow
ShowWindow
GetActiveWindow
GetDC
CallNextHookEx
GetObjectA
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
CreateDCA
GetDeviceCaps
DeleteDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
CreateCompatibleDC
HttpAddRequestHeadersA
InternetReadFile
HttpQueryInfoA
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
HttpEndRequestA
InternetWriteFile
HttpSendRequestExA
InternetConnectA
InternetCloseHandle
GdipCloneImage
GdipDisposeImage
GdipFree
GdiplusStartup
GdipAlloc
GdipLoadImageFromFile
GdipSaveImageToFile
GdiplusShutdown
GdipGetImageEncoders
GdipGetImageEncodersSize
Netbios
atoi
memmove
free
malloc
??3@YAXPAX@Z
wcscmp
??2@YAPAXI@Z
_except_handler3
_local_unwind2
sprintf
strstr
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ