GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
Static task
static1
Behavioral task
behavioral1
Sample
dc4325f3dbd36b9d03fddf028594bba6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc4325f3dbd36b9d03fddf028594bba6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dc4325f3dbd36b9d03fddf028594bba6_JaffaCakes118
Size
92KB
MD5
dc4325f3dbd36b9d03fddf028594bba6
SHA1
648d3670e55338398e86cb3b00de207946e2db7f
SHA256
5d38d7adf2ff10de8aa3b37108b115fd52f8e5b7b113fd715b7a14ccb51c7a5c
SHA512
a9af071a2b026328d303d6f16d22d5f92cbccf40e5cad481c939a3fdc2d323165bb584a3dc06ca52ca7fbcba4f8a44e2bc7b49495e35ffadf8c890300abbf150
SSDEEP
1536:AID7mEVe+fsZr0ItmnKXH99P5ju7/a9Z9OFP:bD6+C0IkKTPFuDa9ZIB
Checks for missing Authenticode signature.
resource |
---|
dc4325f3dbd36b9d03fddf028594bba6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImmGetContext
ImmReleaseContext
ImmGetCompositionStringA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
OutputDebugStringA
WideCharToMultiByte
GetTickCount
HeapAlloc
OpenProcess
ReadProcessMemory
VirtualQueryEx
CopyFileA
GetPrivateProfileStringA
GlobalLock
GlobalFree
GlobalUnlock
GlobalHandle
GlobalAlloc
CreateFileMappingA
GetSystemDirectoryA
GetFileInformationByHandle
GetCurrentProcessId
Sleep
InterlockedExchange
CreateThread
GetModuleFileNameA
WriteFile
CloseHandle
CreateFileA
DeleteFileA
GetLocalTime
GetTempPathA
ReadFile
GetFileSize
GetCurrentProcess
GetCurrentThreadId
GetProcAddress
GetModuleHandleA
GetProcessHeap
HeapFree
LoadLibraryA
UnhookWindowsHookEx
GetMessageA
GetWindowThreadProcessId
GetDC
ReleaseDC
SetRect
GetFocus
GetKeyState
FindWindowExA
PostThreadMessageA
GetWindowLongA
PeekMessageA
TranslateMessage
DispatchMessageA
GetForegroundWindow
GetWindowTextA
CallNextHookEx
CreateCompatibleDC
DeleteObject
BitBlt
GetDeviceCaps
GetObjectA
GetDIBits
DeleteDC
CreateCompatibleBitmap
SelectObject
AVIFileOpenA
AVIStreamSetFormat
AVIMakeCompressedStream
AVIFileCreateStreamA
AVISaveOptionsFree
AVIFileRelease
AVIStreamRelease
AVIFileExit
AVIStreamWrite
AVIFileInit
ord2
waveOutWrite
waveInClose
waveInAddBuffer
waveInOpen
waveOutClose
waveOutOpen
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
fclose
fseek
strncmp
printf
free
_ftol
_CIacos
fwrite
_CIpow
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
fflush
strrchr
atoi
_memicmp
atol
wcslen
strncpy
vsprintf
_strlwr
fopen
__CxxFrameHandler
memcpy
??2@YAPAXI@Z
memset
memmove
strlen
strstr
strcpy
time
rename
rand
srand
_mkdir
_access
sprintf
strchr
abs
strftime
localtime
memcmp
strcmp
strcat
SHSetValueA
SHGetValueA
GetDLLVer
InstallHOOK
InstallLocalHOOK
UninstallHOOK
partInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ