Install
Uninstall
Static task
static1
Behavioral task
behavioral1
Sample
0351451f62268c0ad729d5254050cd39_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0351451f62268c0ad729d5254050cd39_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0351451f62268c0ad729d5254050cd39_JaffaCakes118
Size
23KB
MD5
0351451f62268c0ad729d5254050cd39
SHA1
e271843573e791b5b98ad1e4d01b4b1d2fbd028a
SHA256
bdba830dac1514e6545d8e415265e2b17639c8acf507e042d7277a2dfc2db9e7
SHA512
e07e797ebf8f43ddbcac01df2bb4b316237080245ef3eb6dcdcc685dd1f999828dad1baa0eeea71756dcefa9b11b195d8f71e4e5fcb9debae7911dcd89b403e7
SSDEEP
384:WHcWiNAEkl6hQSM5YZncVn+30RbVdE9+e+l5lqC631/hiT:WHcWcSNAZcV+4pe9+b5Hqa
Checks for missing Authenticode signature.
resource |
---|
0351451f62268c0ad729d5254050cd39_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTempPathA
GetFileAttributesW
ReadProcessMemory
VirtualQueryEx
WideCharToMultiByte
ReadFile
GetFileSize
CreateFileA
SetFilePointer
OutputDebugStringA
HeapAlloc
GetProcessHeap
GetWindowsDirectoryA
GetProcAddress
DeleteFileA
GetModuleHandleA
FindClose
FindFirstFileA
FreeLibrary
GetModuleFileNameA
Sleep
CloseHandle
EnterCriticalSection
LeaveCriticalSection
OpenProcess
TerminateProcess
GetCurrentProcess
InitializeCriticalSection
LoadLibraryA
GetDC
GetWindowRect
wsprintfA
GetWindowTextA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetClassNameW
GetWindow
FindWindowA
_strupr
_strcmpi
free
strcpy
memset
malloc
??3@YAXPAX@Z
wcscmp
??2@YAPAXI@Z
fclose
ftell
fseek
fopen
mbstowcs
strlen
_except_handler3
strncpy
strchr
rand
srand
time
wcslen
strstr
wcsncat
wcscpy
wcsstr
exit
printf
sprintf
memcpy
strrchr
_local_unwind2
tolower
_vsnprintf
InternetCloseHandle
GetAdaptersInfo
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
CreateDCA
DeleteObject
Install
Uninstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ