GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
Static task
static1
Behavioral task
behavioral1
Sample
5a7844b523f408340b5c64d3a46f97c4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5a7844b523f408340b5c64d3a46f97c4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5a7844b523f408340b5c64d3a46f97c4_JaffaCakes118
Size
108KB
MD5
5a7844b523f408340b5c64d3a46f97c4
SHA1
f55f553d6bc1b8d777c279775f68a3f076a37626
SHA256
97edc4b02decf13d03a3db97e2314a204205b0f263e5bc742a128fa159bffef7
SHA512
731d2077ea628f1a150ac3da8da8ae771d0af2c8dc9c65207b85b3cdb2da9046500119a866d852fa4276d40ebd5ad5e81193c008c6c270023c07a1d50a2e880e
SSDEEP
3072:FIOehVPIHLVCsYnqsQO86Jxp17PFuDa9Z4X2:DOnqsQO8Q99u2s2
Checks for missing Authenticode signature.
resource |
---|
5a7844b523f408340b5c64d3a46f97c4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
ImmReleaseContext
ImmGetContext
ImmGetCompositionStringA
CreateFileMappingA
HeapFree
GetProcessHeap
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
OutputDebugStringA
WideCharToMultiByte
GetCurrentProcessId
GetLocalTime
OpenProcess
ReadProcessMemory
VirtualQueryEx
GetTickCount
CopyFileA
GetPrivateProfileStringA
GlobalLock
GetCurrentProcess
GlobalUnlock
GlobalHandle
GlobalAlloc
GetSystemDirectoryA
DeleteFileA
CreateFileA
CloseHandle
GetFileInformationByHandle
WriteFile
GetModuleFileNameA
CreateThread
GetModuleHandleA
LoadLibraryA
GetProcAddress
VirtualProtect
InterlockedExchange
Sleep
GetFileSize
ReadFile
GlobalFree
GetTempPathA
HeapAlloc
PeekMessageA
CallNextHookEx
GetWindowTextA
GetForegroundWindow
PostThreadMessageA
UnhookWindowsHookEx
MsgWaitForMultipleObjects
GetDC
ReleaseDC
SetRect
GetFocus
GetKeyState
FindWindowExA
GetWindowLongA
GetWindowThreadProcessId
TranslateMessage
DispatchMessageA
GetObjectA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetDeviceCaps
DeleteDC
DeleteObject
GetDIBits
BitBlt
AVIMakeCompressedStream
AVISaveOptionsFree
AVIFileRelease
AVIStreamRelease
AVIFileExit
AVIStreamWrite
AVIFileInit
AVIFileOpenA
AVIFileCreateStreamA
AVIStreamSetFormat
ord2
waveInClose
waveInOpen
waveOutOpen
waveOutWrite
waveInAddBuffer
waveOutClose
SHGetValueA
SHSetValueA
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
atoi
fflush
fwrite
fclose
_memicmp
fopen
fseek
strncmp
printf
free
_ftol
_CIacos
atol
_CIpow
__dllonexit
_initterm
malloc
_adjust_fdiv
wcslen
vsprintf
localtime
strftime
strchr
_access
_mkdir
srand
rand
rename
strncpy
_strlwr
_onexit
__CxxFrameHandler
??2@YAPAXI@Z
memmove
time
sprintf
strstr
strrchr
HttpSendRequestA
GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ