?Is_KBD_Disabled@@YAHXZ
?T3_KBD_Disable@@YAHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
b707e74beb65c4c5a8935c291aba0da0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b707e74beb65c4c5a8935c291aba0da0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b707e74beb65c4c5a8935c291aba0da0_JaffaCakes118
Size
1.1MB
MD5
b707e74beb65c4c5a8935c291aba0da0
SHA1
3a38eeb953df0d67cd6f8377129271a49a1bbc10
SHA256
cc6750bbd2dc8d550d8838ec667acc3ef6e7163640bd548c5c17a361a42ea351
SHA512
533bd3db98428fd35fab60a6b79bdfc97ce2fcdc03adb5f439657bb3bd3c031b85c6440b69a1781341b0dfc18c730eb4389fbf6b2b7a6d765f955d7509c673f8
SSDEEP
12288:fmOVesA+lTfQTt44mqE3dWuCsXghj2wQi8UuDdUuDC8jTDz:ffWiDQTRgdoZhXQiYDJD
Checks for missing Authenticode signature.
resource |
---|
b707e74beb65c4c5a8935c291aba0da0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImageDirectoryEntryToData
GetCurrentProcess
OpenProcess
Module32Next
Module32First
CreateToolhelp32Snapshot
Process32Next
Process32First
FindClose
FindFirstFileA
HeapFree
ReadFile
HeapAlloc
GetProcessHeap
GetFileInformationByHandle
CreateFileA
GetSystemDirectoryA
LocalFree
Thread32Next
SuspendThread
ResumeThread
Thread32First
Sleep
TerminateThread
TerminateProcess
FreeLibrary
LoadLibraryA
GetVersionExA
UnmapViewOfFile
DuplicateHandle
CreateFileMappingA
SizeofResource
LockResource
GetTempPathA
LoadResource
FindResourceA
WriteFile
CreateDirectoryA
VirtualQuery
ExitProcess
ReadProcessMemory
GetFileAttributesA
VirtualAlloc
GetPrivateProfileStringA
GetPrivateProfileIntA
FreeResource
GetTickCount
lstrcatA
GetCurrentDirectoryA
CreateThread
CompareStringW
CompareStringA
SetEndOfFile
GetTimeZoneInformation
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
SetLastError
CloseHandle
GetModuleHandleA
GetProcAddress
VirtualProtect
IsBadReadPtr
InitializeCriticalSection
MapViewOfFile
CreateFileW
WriteConsoleA
HeapSize
SetEnvironmentVariableA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetLastError
RtlUnwind
GetCurrentThreadId
GetCommandLineA
DeleteCriticalSection
FatalAppExitA
VirtualFree
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
InterlockedExchange
GetStringTypeA
GetStringTypeW
SendMessageA
GetWindowThreadProcessId
GetAsyncKeyState
GetActiveWindow
MessageBoxA
FindWindowA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
GetSecurityInfo
GetUserNameA
SetEntriesInAclA
SetSecurityInfo
RegCreateKeyExA
ShellExecuteA
InternetOpenUrlA
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetReadFile
InternetCloseHandle
?Is_KBD_Disabled@@YAHXZ
?T3_KBD_Disable@@YAHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ