Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
b597bc20eb0d61a9f0e718997ecb2507_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b597bc20eb0d61a9f0e718997ecb2507_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b597bc20eb0d61a9f0e718997ecb2507_JaffaCakes118
Size
17KB
MD5
b597bc20eb0d61a9f0e718997ecb2507
SHA1
3a0c99775e866fb25d7843e59e1d1ea2d3e350c1
SHA256
214e4a837489fe6b139817649280c8dafa4b1cc29d046e58a3451aaaac9d213e
SHA512
7e20a022b4ac0c3823a5f680d93565769507e165160a35ed4464e5c2bfe5604a56f4641891162ba01674868fcb623f65eb71f09703727ed4ccb01ea46e20dd8f
SSDEEP
384:wXT7MuXSH1kmRYrAQZJGinJK8o98VoyDgS/pZYg9IPR5:wXrXSCmRYEuGB9VuDxZYoIPR5
Checks for missing Authenticode signature.
resource |
---|
b597bc20eb0d61a9f0e718997ecb2507_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
WideCharToMultiByte
GetSystemTime
GetPrivateProfileStringA
CloseHandle
ReadFile
lstrcatA
CreateThread
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
OutputDebugStringA
LoadLibraryA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
lstrcpyA
lstrcmpA
Sleep
CreateFileA
VirtualProtect
RtlUnwind
PostThreadMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
FindWindowA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenUrlA
shutdown
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ