GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
Static task
static1
Behavioral task
behavioral1
Sample
aeb8454dc3cbcc7d95492225b3da8b1f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aeb8454dc3cbcc7d95492225b3da8b1f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aeb8454dc3cbcc7d95492225b3da8b1f_JaffaCakes118
Size
56KB
MD5
aeb8454dc3cbcc7d95492225b3da8b1f
SHA1
2a9d7535b09a077cce3e61445c6c27d4c3ad59c9
SHA256
186259499bf416a2897506730ca7ae8def379fd5f68b0db3745bec30295e8fc8
SHA512
6e47d2ba076d314982ad2a6994f25c47ede4c208b93ca963d7b37fb6035e1273a724e79bba0de77eb0495399b15f9b161d8ab1e76fd29ad1bf11af22fe2cbd36
SSDEEP
384:sC6QK6SF3zFlnKuPeqDhzgeNkavJ4CJpf1Cy8SNojXZy+nNXkkXJ949Tp1DcXAnk:FUz7/Gq9gyT/aB1F59icXKrS
Checks for missing Authenticode signature.
resource |
---|
aeb8454dc3cbcc7d95492225b3da8b1f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImmGetContext
ImmGetCompositionStringA
ImmReleaseContext
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
OutputDebugStringA
WideCharToMultiByte
GetTickCount
HeapAlloc
OpenProcess
ReadProcessMemory
VirtualQueryEx
CopyFileA
GetPrivateProfileStringA
GlobalLock
GlobalFree
GlobalUnlock
GlobalHandle
GlobalAlloc
GetSystemDirectoryA
GetFileInformationByHandle
GetModuleFileNameA
WriteFile
CloseHandle
CreateFileA
GetLocalTime
GetTempPathA
ReadFile
GetFileSize
GetCurrentProcess
GetProcAddress
LoadLibraryA
InterlockedExchange
Sleep
CreateThread
DeleteFileA
GetModuleHandleA
GetProcessHeap
HeapFree
GetCurrentThreadId
GetCurrentProcessId
CreateFileMappingA
PeekMessageA
GetWindowLongA
TranslateMessage
DispatchMessageA
FindWindowExA
GetKeyState
GetFocus
GetDC
GetForegroundWindow
GetWindowTextA
GetWindowThreadProcessId
SetRect
ReleaseDC
CallNextHookEx
UnhookWindowsHookEx
DeleteObject
BitBlt
GetDeviceCaps
SelectObject
GetObjectA
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIFileOpenA
AVIFileInit
AVISaveOptionsFree
AVIFileRelease
AVIStreamRelease
AVIFileExit
AVIStreamWrite
AVIStreamSetFormat
ord2
_strlwr
localtime
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
printf
strncmp
fseek
fopen
fclose
strlen
memset
strstr
strcpy
??3@YAXPAX@Z
time
rename
rand
srand
_mkdir
_access
sprintf
??2@YAPAXI@Z
memmove
memcpy
__CxxFrameHandler
strchr
abs
strftime
_memicmp
memcmp
strcmp
strcat
vsprintf
strncpy
wcslen
atol
atoi
strrchr
fflush
fwrite
HttpSendRequestA
SHGetValueA
SHSetValueA
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ