DllMain
Init
Rdp
Static task
static1
Behavioral task
behavioral1
Sample
497e1d0df99529f87b1ddbe6cb024386_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
497e1d0df99529f87b1ddbe6cb024386_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
497e1d0df99529f87b1ddbe6cb024386_JaffaCakes118
Size
6KB
MD5
497e1d0df99529f87b1ddbe6cb024386
SHA1
22ce9bede3e207037d53c4350bd97f26b7924f9e
SHA256
893d06cf590bc3edcfcec0c865aea1f206a378d81328776ab8d74a08aae0d54c
SHA512
997c5683dd15b4a0b5abb72b5702df4f4a075a4c7def4a67d8935eb5b5263bff92421921cbd11f43dbfc17f6e31e9c9bc080e3177ff30bf770a376d11a61a6ec
SSDEEP
96:Z1D/fIA1pNW0xbAp6etGG1cTyYJXC79fmKcp5hM3/EUcauxeWjOE:3XNWnGBTU7VmKcpHgLcddjO
Checks for missing Authenticode signature.
resource |
---|
497e1d0df99529f87b1ddbe6cb024386_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileMappingA
GetLocalTime
GlobalLock
GlobalUnlock
MapViewOfFile
UnmapViewOfFile
CallNextHookEx
CloseClipboard
GetClipboardData
GetForegroundWindow
GetKeyboardLayout
GetKeyboardState
GetWindowTextA
GetWindowThreadProcessId
KillTimer
OpenClipboard
SetTimer
SetWindowsHookExA
ToAsciiEx
UnhookWindowsHookEx
memset
RtlCreateHeap
RtlSetHeapInformation
RtlAllocateHeap
RtlFreeHeap
RtlDestroyHeap
LdrDisableThreadCalloutsForDll
strlen
strcmp
strcpy
strcat
NtClose
sprintf
memcpy
DllMain
Init
Rdp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE