Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
96666d5e5455c6751f3e04fd90fb7e4b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
96666d5e5455c6751f3e04fd90fb7e4b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
96666d5e5455c6751f3e04fd90fb7e4b_JaffaCakes118
Size
11KB
MD5
96666d5e5455c6751f3e04fd90fb7e4b
SHA1
268d876096b81ed5c76e0553f1751c079c748308
SHA256
e59d9e32fc94fa2df9487f17a945b961108200a73d43856e2b37ad670e591a12
SHA512
a3f4f05907f01f1433b9be39da5aade1208032727e1efa9fc91402fa168864c0dbf759bda8eb3b35430f611bc4167602527fe07a3f96e6636b9693b93df423a0
SSDEEP
192:fFEZtSjYdX/RlrxsK9YWSeYK1wV34QL+MdEmfSITPT:fOsq/Rle8Ed4QHEoVP
Checks for missing Authenticode signature.
resource |
---|
96666d5e5455c6751f3e04fd90fb7e4b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OutputDebugStringA
VirtualProtect
Sleep
lstrcatA
lstrcpyA
lstrcmpA
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
WritePrivateProfileStringA
GetTempPathA
GetPrivateProfileStringA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
CreateThread
UnmapViewOfFile
LoadLibraryA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
CallNextHookEx
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ