GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
Static task
static1
Behavioral task
behavioral1
Sample
718cbda3064aeaed137326bee4eb26b4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
718cbda3064aeaed137326bee4eb26b4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
718cbda3064aeaed137326bee4eb26b4_JaffaCakes118
Size
48KB
MD5
718cbda3064aeaed137326bee4eb26b4
SHA1
c022f98ea8d804a0ec0ef0cf6dd8a93662e4eebe
SHA256
d2d72734325afb13e9d1fac804cbdb524a7f666ae49afaba5226ba55a37d17ac
SHA512
ea0d0df295e050a157c81de07cec64735ea44d054080f00887678f63b50997f2469cfd551a06ba75de29ccd27ef6a81f9db54e24f3e2a626a6ffe210cf5120f9
SSDEEP
384:6PE9ThfX3Nj7Vg8dnhqsNtaeG4CJuVqMH2NbQT42Nj+sjdWsfXuBGNup/KwLKxjG:+6TVXZxqsFr7TUSDMywLKxjIOPfg
Checks for missing Authenticode signature.
resource |
---|
718cbda3064aeaed137326bee4eb26b4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImmGetContext
ImmGetCompositionStringA
ImmReleaseContext
OutputDebugStringA
GetCurrentProcess
GetProcAddress
GetModuleHandleA
WideCharToMultiByte
GetTickCount
HeapAlloc
OpenProcess
ReadProcessMemory
VirtualQueryEx
CopyFileA
GlobalLock
GlobalFree
GlobalUnlock
GlobalHandle
GlobalAlloc
GetSystemDirectoryA
GetFileInformationByHandle
GetModuleFileNameA
WriteFile
CloseHandle
CreateFileA
DeleteFileA
GetLocalTime
GetTempPathA
ReadFile
GetFileSize
CreateThread
Sleep
CreateFileMappingA
GetCurrentProcessId
GetCurrentThreadId
LoadLibraryA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
InterlockedExchange
GetProcessHeap
HeapFree
PeekMessageA
GetWindowLongA
GetWindowTextA
TranslateMessage
FindWindowExA
GetKeyState
GetFocus
DispatchMessageA
GetWindowThreadProcessId
GetForegroundWindow
SetWindowsHookExA
SetRect
ReleaseDC
CallNextHookEx
UnhookWindowsHookEx
GetDC
GetDIBits
DeleteObject
BitBlt
GetDeviceCaps
GetObjectA
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIFileOpenA
AVIFileInit
AVISaveOptionsFree
AVIFileRelease
AVIStreamRelease
AVIFileExit
AVIStreamWrite
AVIStreamSetFormat
ord2
_strlwr
localtime
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
printf
strncmp
fseek
memcmp
fopen
strstr
strcpy
memset
??3@YAXPAX@Z
time
rename
rand
srand
_mkdir
_access
sprintf
??2@YAPAXI@Z
memmove
abs
__CxxFrameHandler
strftime
_memicmp
memcpy
strcmp
strlen
strcat
vsprintf
strncpy
wcslen
strrchr
fflush
fwrite
fclose
SHGetValueA
SHSetValueA
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ