AddProcessExclusion
GetChangeRect
GetChangedWindowList
IsTitleBarButtonPressed
RemoveProcessExclusion
SetButtonXOffset
SetSingleWindow
ShowTitleBarButton
StartHooks
StopHooks
Static task
static1
Behavioral task
behavioral1
Sample
fb22cbb7eb963758a622c637bba59079_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb22cbb7eb963758a622c637bba59079_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fb22cbb7eb963758a622c637bba59079_JaffaCakes118
Size
9KB
MD5
fb22cbb7eb963758a622c637bba59079
SHA1
bb80c39b3c13ff21038af63bdeb9c59c6fa3f9fe
SHA256
f19409be73d6a36e2baa890bc469d0b0fae783fc1c77c5f94582a2e76fa81ad7
SHA512
677c1207f2f5b8a2394ddb452e6f57e75eced1ae2a3cab4fe345e2cc297541d0bd8a8f1257e88a835a7057140dc4402a54aade7bdab2fe61dcf917344578bca2
SSDEEP
192:SFFmh0+DNL5qBINQUK0XzzPwHJTOrWxF6SdCRqg:SFQhrDNL5qINntzmKK6jq
Checks for missing Authenticode signature.
resource |
---|
fb22cbb7eb963758a622c637bba59079_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateDirectoryW
CreateFileA
CreateProcessA
CreateThread
ExitProcess
FreeLibraryAndExitThread
GetCommandLineA
GetModuleFileNameA
GetProcAddress
GetShortPathNameA
LoadLibraryA
OpenEventA
RtlZeroMemory
Sleep
TerminateThread
VirtualAlloc
VirtualProtect
WaitForSingleObject
WinExec
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
lstrlenW
CallWindowProcA
CreateDialogParamW
FindWindowW
SetWindowLongA
SetWindowTextW
ShowWindow
wsprintfA
CloseServiceHandle
ControlService
CreateServiceA
DeleteService
OpenSCManagerA
OpenServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
StartServiceCtrlDispatcherA
WSASocketA
closesocket
connect
gethostbyname
ioctlsocket
ntohs
recv
select
send
setsockopt
socket
InternetConnectA
WinVerifyTrust
ShellExecuteA
StrRChrA
IcmpCloseHandle
IcmpCreateFile
IcmpSendEcho
AddProcessExclusion
GetChangeRect
GetChangedWindowList
IsTitleBarButtonPressed
RemoveProcessExclusion
SetButtonXOffset
SetSingleWindow
ShowTitleBarButton
StartHooks
StopHooks
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE