GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
Static task
static1
Behavioral task
behavioral1
Sample
a812a5e8cb4e2315231aba847776f322_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a812a5e8cb4e2315231aba847776f322_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a812a5e8cb4e2315231aba847776f322_JaffaCakes118
Size
108KB
MD5
a812a5e8cb4e2315231aba847776f322
SHA1
52a57df22d1f6cf9b604b889bb4614c953a1d5e8
SHA256
68b5e26b9e264a9db5ee508a42e769cae5ec95529418a474f7e41077e479ccea
SHA512
b62d8c6ce83a6ec1ebf9476e908b0f3d9e131997485c82126336b1826beca9867638fc00ee0aad4616f4b9dca2a7a487af1e2a6a3f92250ee422b1fe3703bcca
SSDEEP
3072:er32qFjppXDVidIi1DE4esnUQ0QEYWPFuDa9Z4XJh:96i1DE4esn5Z89u2sD
Checks for missing Authenticode signature.
resource |
---|
a812a5e8cb4e2315231aba847776f322_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImmGetContext
ImmGetCompositionStringA
ImmReleaseContext
MapViewOfFile
OpenFileMappingA
OutputDebugStringA
WideCharToMultiByte
GetTickCount
GetCurrentProcessId
HeapAlloc
OpenProcess
ReadProcessMemory
VirtualQueryEx
CopyFileA
GetPrivateProfileStringA
GlobalLock
GlobalFree
GlobalUnlock
GlobalHandle
GlobalAlloc
GetSystemDirectoryA
GetFileInformationByHandle
Sleep
InterlockedExchange
VirtualProtect
GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateThread
GetModuleFileNameA
WriteFile
CloseHandle
CreateFileA
DeleteFileA
GetLocalTime
GetTempPathA
ReadFile
GetFileSize
GetCurrentProcess
UnmapViewOfFile
GetProcessHeap
HeapFree
CreateFileMappingA
PeekMessageA
ReleaseDC
SetRect
PostThreadMessageA
GetDC
MsgWaitForMultipleObjects
UnhookWindowsHookEx
CallNextHookEx
GetWindowTextA
GetForegroundWindow
DispatchMessageA
GetFocus
TranslateMessage
GetWindowLongA
GetWindowThreadProcessId
FindWindowExA
GetKeyState
DeleteObject
BitBlt
GetDeviceCaps
SelectObject
GetObjectA
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIFileOpenA
AVIFileInit
AVISaveOptionsFree
AVIFileRelease
AVIStreamRelease
AVIFileExit
AVIStreamWrite
AVIStreamSetFormat
ord2
waveOutOpen
waveOutWrite
waveInAddBuffer
waveInOpen
waveOutClose
waveInClose
SHGetValueA
SHSetValueA
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
_CIpow
_CIacos
_ftol
free
printf
strncmp
fopen
fclose
fwrite
fflush
atoi
atol
wcslen
vsprintf
localtime
strftime
strchr
_access
_mkdir
_strlwr
fseek
strrchr
__CxxFrameHandler
??2@YAPAXI@Z
memmove
time
sprintf
strstr
_memicmp
strncpy
rename
rand
srand
GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ