InstallHook
InstallHook2
Main
RemoveHook
RemoveHook2
Static task
static1
Behavioral task
behavioral1
Sample
4a2fa250e0d9c4d99c0caad07c03fc9d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a2fa250e0d9c4d99c0caad07c03fc9d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4a2fa250e0d9c4d99c0caad07c03fc9d_JaffaCakes118
Size
88KB
MD5
4a2fa250e0d9c4d99c0caad07c03fc9d
SHA1
e4884e00173d07cdd9a692ae4cc7235e71d9f9cb
SHA256
4924d0b90cf0239ad027429b271040938cb5c7a3819c6d897141b9ef5f0ec91a
SHA512
8c2cdf7cff6bb8880b201b8694baed589699800e106dcdf06859afdc9cf179491b0423279d7d24eacde0803142d4a0f1a811464c1f8828fef4eab0408ec91ac3
SSDEEP
768:POzbA51RRafLWkD33LfDV3Gzz2HpuVFHdxV2k0UDMu+EBMNTD8g3pj8XHbt9c+XS:Gzbo1RRaTdz3qxN2BCIlgt9PC
Checks for missing Authenticode signature.
resource |
---|
4a2fa250e0d9c4d99c0caad07c03fc9d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetModuleHandleA
GetProcAddress
Sleep
GetModuleHandleW
TerminateProcess
GetCurrentProcess
ExitProcess
CreateEventW
CloseHandle
GetModuleFileNameW
DisableThreadLibraryCalls
CreateProcessW
LoadLibraryW
WaitForSingleObject
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
HeapSize
GetDriveTypeA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetFullPathNameW
GetCurrentDirectoryA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
RtlUnwind
GetTimeZoneInformation
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSection
PostMessageW
GetClassNameW
GetClassNameA
IsWindow
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
SetPropW
MessageBoxW
CallWindowProcW
SetWindowLongW
RemovePropW
InstallHook
InstallHook2
Main
RemoveHook
RemoveHook2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ