AddProcessExclusion
GetChangeRect
GetChangedWindowList
IsTitleBarButtonPressed
RemoveProcessExclusion
SetButtonXOffset
SetSingleWindow
ShowTitleBarButton
StartHooks
StopHooks
Behavioral task
behavioral1
Sample
844eb1574b539a46bbe306b2935621e7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
844eb1574b539a46bbe306b2935621e7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
844eb1574b539a46bbe306b2935621e7_JaffaCakes118
Size
138KB
MD5
844eb1574b539a46bbe306b2935621e7
SHA1
7765f7bb1ed498068b619123dc5aaae17d835a5e
SHA256
9acb194053e35d44147410da7467395694361ab06377d79733cf7be0af6caaa7
SHA512
c0dc85023f039e99f6f00c4f098a24113397fce7bc1203849d217ac09e8e3e243149acb3ec5ce4642c8886018e7a36cf766f6fe99bb48a4e6d6ccc41a3214159
SSDEEP
3072:R35C/DLUaFPmgRMNlPTGQQm6ytwZEsrYkK4h9+:3kL98gWNlPTGQQm6agrd
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
844eb1574b539a46bbe306b2935621e7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AddProcessExclusion
GetChangeRect
GetChangedWindowList
IsTitleBarButtonPressed
RemoveProcessExclusion
SetButtonXOffset
SetSingleWindow
ShowTitleBarButton
StartHooks
StopHooks
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE