?Is_KBD_Disabled@@YAHXZ
?T3_KBD_Disable@@YAHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
db828c568853c11bbe688f95fdfa9412_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db828c568853c11bbe688f95fdfa9412_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
db828c568853c11bbe688f95fdfa9412_JaffaCakes118
Size
1.1MB
MD5
db828c568853c11bbe688f95fdfa9412
SHA1
3566efc861547eca5dface8fd04f0c3abac01477
SHA256
bdba5b8ecb7886c3ba03e950d3ab6be80ca9e236a6a6b0be4243515f5aa1ca5d
SHA512
914c65cb59a81fe3f9c1c66d2a0a1158ba86e1275571400c8ba80b93d8fa065e2da7a276c834503c2efcc62880b72b452d70b3a748bfded22b105eebf78b81f2
SSDEEP
12288:QACVl6klhytYe44ak71ZDWuCsXghj2wQi8UuDdUuDPxjTDz:QX9lQtYM1ZDoZhXQiYDJD
Checks for missing Authenticode signature.
resource |
---|
db828c568853c11bbe688f95fdfa9412_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImageDirectoryEntryToData
GetCurrentProcess
OpenProcess
Module32Next
Module32First
CreateToolhelp32Snapshot
Process32Next
Process32First
FindClose
FindFirstFileA
HeapFree
ReadFile
HeapAlloc
GetProcessHeap
GetFileInformationByHandle
CreateFileA
GetSystemDirectoryA
LocalFree
Thread32Next
SuspendThread
ResumeThread
Thread32First
Sleep
TerminateThread
TerminateProcess
FreeLibrary
LoadLibraryA
GetVersionExA
UnmapViewOfFile
DuplicateHandle
CreateFileMappingA
SizeofResource
LockResource
GetTempPathA
LoadResource
FindResourceA
WriteFile
CreateDirectoryA
VirtualQuery
ExitProcess
ReadProcessMemory
GetFileAttributesA
VirtualAlloc
GetPrivateProfileStringA
GetPrivateProfileIntA
FreeResource
GetTickCount
lstrcatA
GetCurrentDirectoryA
CreateThread
CompareStringW
CompareStringA
SetEndOfFile
GetTimeZoneInformation
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
SetLastError
CloseHandle
GetModuleHandleA
GetProcAddress
VirtualProtect
IsBadReadPtr
InitializeCriticalSection
MapViewOfFile
CreateFileW
WriteConsoleA
HeapSize
SetEnvironmentVariableA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetLastError
RtlUnwind
GetCurrentThreadId
GetCommandLineA
DeleteCriticalSection
FatalAppExitA
VirtualFree
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
InterlockedExchange
GetStringTypeA
GetStringTypeW
SendMessageA
GetWindowThreadProcessId
GetAsyncKeyState
GetActiveWindow
MessageBoxA
FindWindowA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
GetSecurityInfo
GetUserNameA
SetEntriesInAclA
SetSecurityInfo
RegCreateKeyExA
ShellExecuteA
InternetOpenUrlA
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetReadFile
InternetCloseHandle
?Is_KBD_Disabled@@YAHXZ
?T3_KBD_Disable@@YAHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ