Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
43198a4162f4427246bcacd18e724c57_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43198a4162f4427246bcacd18e724c57_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
43198a4162f4427246bcacd18e724c57_JaffaCakes118
Size
19KB
MD5
43198a4162f4427246bcacd18e724c57
SHA1
5caea5d34c0dc9cfd89b344b0b12108f97a143c1
SHA256
a947421736646697b1a1f55a8a1b55207cadca0f22b585126a4a28b6593ad398
SHA512
54902bb0381bc614ebe58e4c97171f14f43270acc0f3447672e81e7386d9bed725454c56d494b48d0215c1e47d57be93cd457da35267c18803017cde6a4a713e
SSDEEP
384:CiuRZo0ru4/7mHTLuk2kU1acn8SK7T8+JuKOUpPB7f5:CjRx/k+k2kO8FfShUpPf
Checks for missing Authenticode signature.
resource |
---|
43198a4162f4427246bcacd18e724c57_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
ExitProcess
lstrcpyA
lstrcmpA
Sleep
lstrlenA
lstrcmpiA
GetTickCount
lstrcpynA
WideCharToMultiByte
GetSystemTime
GetPrivateProfileStringA
CloseHandle
ReadFile
CreateFileA
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
OutputDebugStringA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
RtlUnwind
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ