EnHookWindow
UninstallHook
sub_getmessage
sub_keyboard
sub_mouse
Static task
static1
Behavioral task
behavioral1
Sample
5b74cda15bc1e204745ef5d80879fd5f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b74cda15bc1e204745ef5d80879fd5f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5b74cda15bc1e204745ef5d80879fd5f_JaffaCakes118
Size
891KB
MD5
5b74cda15bc1e204745ef5d80879fd5f
SHA1
5c6bb6294fa1464f5d9533ab87c5b5c3156b9c16
SHA256
d0e59ef905d3ea58425ff6b9b8202e14b8cc4544abb6a1d9e12248647e1130aa
SHA512
f802c16dec4a774bd03beb8be99bf1a963b49ba16c604f4fc6495cfb381c2f6c2928f5471c35a1de5e3a429050368523fb71017839644abb2afcdbb683401b88
SSDEEP
24576:Trrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr:
Checks for missing Authenticode signature.
resource |
---|
5b74cda15bc1e204745ef5d80879fd5f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetWindowThreadProcessId
GetWindowTextA
GetForegroundWindow
GetDC
GetClientRect
GetClassNameA
wsprintfA
GetModuleFileNameA
GetProcAddress
GetTempPathA
GetWindowsDirectoryA
GlobalAlloc
LoadLibraryA
MultiByteToWideChar
ReadFile
ReadProcessMemory
CreateThread
RtlZeroMemory
SetFileAttributesA
SetFilePointer
GetFileSize
TerminateProcess
VirtualAlloc
VirtualFree
VirtualProtectEx
WideCharToMultiByte
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
CreateFileA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
ExitThread
DisableThreadLibraryCalls
Sleep
DeleteFileA
RtlMoveMemory
RegQueryValueExA
StrChrA
StrStrA
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
DeleteObject
BitBlt
DeleteDC
CLSIDFromString
GdiplusShutdown
GdipSaveImageToFile
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
closesocket
connect
gethostbyname
inet_addr
ntohs
recv
send
socket
WSACleanup
WSAStartup
strrchr
EnHookWindow
UninstallHook
sub_getmessage
sub_keyboard
sub_mouse
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ