EnHookWindow
UninstallHook
sub_getmessage
sub_keyboard
sub_mouse
Static task
static1
Behavioral task
behavioral1
Sample
45d53252937fa7433a1b10436cbcb5f9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45d53252937fa7433a1b10436cbcb5f9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
45d53252937fa7433a1b10436cbcb5f9_JaffaCakes118
Size
891KB
MD5
45d53252937fa7433a1b10436cbcb5f9
SHA1
0c8a30f0b3339693e22d285b9b1f15904d91dc2c
SHA256
4125bc48e602aa3cac9a02c361e651975df3ecbbbcb019a772d23f1d38c1ee0d
SHA512
1edbc7b75f2ed4fb7b15f4801eac26ba016fa0e3857da8d560ead268d88fc7a61c1540f707de98241b7d621ab7ed18bab87c6439b64eeb732dc1667f0c568ba3
SSDEEP
12288:Bpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqpqs:
Checks for missing Authenticode signature.
resource |
---|
45d53252937fa7433a1b10436cbcb5f9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IsWindowEnabled
IsWindowVisible
GetWindowTextA
GetWindowLongA
GetForegroundWindow
GetDC
GetClientRect
GetClassNameA
EnumWindows
wsprintfA
ExitThread
GetCurrentDirectoryA
GetCurrentProcess
GetFileSize
GetModuleFileNameA
GetProcAddress
GetTempPathA
GetWindowsDirectoryA
GlobalAlloc
DisableThreadLibraryCalls
MultiByteToWideChar
ReadFile
RtlMoveMemory
DeleteFileA
SetFileAttributesA
SetFilePointer
Sleep
TerminateProcess
VirtualAlloc
VirtualFree
VirtualProtectEx
WideCharToMultiByte
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
CreateThread
CreateProcessA
CreateFileA
RtlZeroMemory
CloseHandle
LoadLibraryA
RegQueryValueExA
StrChrA
StrStrA
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SelectObject
DeleteObject
CLSIDFromString
GdiplusShutdown
GdipSaveImageToFile
GdipDisposeImage
GdiplusStartup
GdipCreateBitmapFromHBITMAP
closesocket
connect
gethostbyname
inet_addr
ntohs
recv
send
socket
WSACleanup
WSAStartup
strrchr
EnHookWindow
UninstallHook
sub_getmessage
sub_keyboard
sub_mouse
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ