endhook
sethook
Static task
static1
Behavioral task
behavioral1
Sample
b79bc0294494060ccecefb5658aa75a9_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b79bc0294494060ccecefb5658aa75a9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b79bc0294494060ccecefb5658aa75a9_JaffaCakes118
Size
1.5MB
MD5
b79bc0294494060ccecefb5658aa75a9
SHA1
835f8728922867e5a5f574d7c71e1e360efa8d88
SHA256
1908ce6ff426626613e214e94d2f3bd67ea1fb91522581763e15adb0fd453b6d
SHA512
e6c247a6fe4e6ac084f93f54f45d6cbe13bb3fcc0b79c5c3fb1040354267bad461218c83508d76fa22b2df1fe111532b0b8e0d02521b538ef9a58883958732f4
SSDEEP
24576:bKpjEz554FO5dtUDXT6JTbZUVJm/Tn2+6KCuQwqtARm+LPggXrrKS2R:bVz554FOlUDmVLT2byQwKARBPl7rd2
Checks for missing Authenticode signature.
resource |
---|
b79bc0294494060ccecefb5658aa75a9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DeleteCriticalSection
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetKeyboardType
MessageBoxA
RegQueryValueExA
SysFreeString
VerQueryValueA
UnrealizeObject
CoTaskMemFree
ImageList_SetIconSize
GetSaveFileNameW
PlaySoundA
WSACleanup
endhook
sethook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ