GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
Static task
static1
Behavioral task
behavioral1
Sample
b5307f63298a27d542cbda84e87bb19d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b5307f63298a27d542cbda84e87bb19d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b5307f63298a27d542cbda84e87bb19d_JaffaCakes118
Size
56KB
MD5
b5307f63298a27d542cbda84e87bb19d
SHA1
fd13a75e228325aaaf0f5b432ee90b063732b6c5
SHA256
21a98c51cdac9d4833e6e3802671fea8a2909d38ecb007ef776cc6e5d0838597
SHA512
ffd87f0c67948da691cc7547486e883b544d46856f9d3f6e3948f4ed6d3b51ee3ba354ffa0860e96096853bd6189903d49ade42672d35c9d862f0c58b372408e
SSDEEP
384:sC6QK6SF3zFlnKuPeqDhzgeNkavJ4CJpf1Cy8SNojXZy+nNXkkXJ949Tp1DcXAnS:FUz7/Gq9gyT/aB1F59icXKrI
Checks for missing Authenticode signature.
resource |
---|
b5307f63298a27d542cbda84e87bb19d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImmGetContext
ImmGetCompositionStringA
ImmReleaseContext
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
OutputDebugStringA
WideCharToMultiByte
GetTickCount
HeapAlloc
OpenProcess
ReadProcessMemory
VirtualQueryEx
CopyFileA
GetPrivateProfileStringA
GlobalLock
GlobalFree
GlobalUnlock
GlobalHandle
GlobalAlloc
GetSystemDirectoryA
GetFileInformationByHandle
GetModuleFileNameA
WriteFile
CloseHandle
CreateFileA
GetLocalTime
GetTempPathA
ReadFile
GetFileSize
GetCurrentProcess
GetProcAddress
LoadLibraryA
InterlockedExchange
Sleep
CreateThread
DeleteFileA
GetModuleHandleA
GetProcessHeap
HeapFree
GetCurrentThreadId
GetCurrentProcessId
CreateFileMappingA
PeekMessageA
GetWindowLongA
TranslateMessage
DispatchMessageA
FindWindowExA
GetKeyState
GetFocus
GetDC
GetForegroundWindow
GetWindowTextA
GetWindowThreadProcessId
SetRect
ReleaseDC
CallNextHookEx
UnhookWindowsHookEx
DeleteObject
BitBlt
GetDeviceCaps
SelectObject
GetObjectA
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIFileOpenA
AVIFileInit
AVISaveOptionsFree
AVIFileRelease
AVIStreamRelease
AVIFileExit
AVIStreamWrite
AVIStreamSetFormat
ord2
_strlwr
localtime
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
printf
strncmp
fseek
fopen
fclose
strlen
memset
strstr
strcpy
??3@YAXPAX@Z
time
rename
rand
srand
_mkdir
_access
sprintf
??2@YAPAXI@Z
memmove
memcpy
__CxxFrameHandler
strchr
abs
strftime
_memicmp
memcmp
strcmp
strcat
vsprintf
strncpy
wcslen
atol
atoi
strrchr
fflush
fwrite
HttpSendRequestA
SHGetValueA
SHSetValueA
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ