GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
Static task
static1
Behavioral task
behavioral1
Sample
6452c216fbb58ee340a26ed0c3c2266c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6452c216fbb58ee340a26ed0c3c2266c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6452c216fbb58ee340a26ed0c3c2266c_JaffaCakes118
Size
48KB
MD5
6452c216fbb58ee340a26ed0c3c2266c
SHA1
632428bca7966ab3898e9a613c0ab626c159fabe
SHA256
e4fbf80c469423f3c33b1e2d16d33170ece3da392880b05cc28d6fa96c30189b
SHA512
83f196e04b6aab0ca631b1e7fb6cf385b58ce8d6876c24e7949acd80615b0ad5237262d32f52a481ab762c6f1ab4011ef564384845c9d36fb761e657244ddb6d
SSDEEP
384:ZP6heGgJfe3dWiNkH0u9IC5nbWOtWNup:ZizNWiWHBlL
Checks for missing Authenticode signature.
resource |
---|
6452c216fbb58ee340a26ed0c3c2266c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImmGetCompositionStringA
ImmGetContext
ImmReleaseContext
WriteFile
CloseHandle
CreateFileA
DeleteFileA
GetLocalTime
GetTempPathA
CreateThread
Sleep
GetCurrentProcessId
GetCurrentThreadId
LoadLibraryA
HeapFree
GetProcessHeap
InterlockedExchange
GetPrivateProfileStringA
GetPrivateProfileIntA
GetSystemDirectoryA
OutputDebugStringA
GetFileInformationByHandle
HeapAlloc
ReadFile
GetForegroundWindow
GetWindowTextA
CallNextHookEx
UnhookWindowsHookEx
GetWindowRect
_adjust_fdiv
malloc
strcpy
memset
??3@YAXPAX@Z
time
rename
rand
srand
_mkdir
_access
sprintf
memmove
abs
??2@YAPAXI@Z
memcpy
strftime
localtime
getenv
strcat
__CxxFrameHandler
strcmp
strlen
strstr
fwrite
strchr
atoi
memcmp
remove
fclose
fopen
vsprintf
printf
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
free
_initterm
_strlwr
GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ