Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
0d6ecccc9121fafabd87f6e6a8e05137_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d6ecccc9121fafabd87f6e6a8e05137_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0d6ecccc9121fafabd87f6e6a8e05137_JaffaCakes118
Size
19KB
MD5
0d6ecccc9121fafabd87f6e6a8e05137
SHA1
7cb488af254dabf8b023b689ece348a70a411140
SHA256
d2988b2f4f8407857db094a6634edcd21a5aee9b5975885f3edb0476a8c249ac
SHA512
f204801f744b9a13c7360dedc4ef43e205dd867dcb6af81999b9d88a5a9f8fcbdea88fafaa9e8bf8283b8f7ea8d1cf3b5e3feba7d7661f93df2be5a1a96e11bb
SSDEEP
384:VoAnRXqQcayABjocSnV8e2ne+EDhCGWAvzbS/pZHemqL/50:3nlqxdABjoDSHe+EgAvzGxZHemQG
Checks for missing Authenticode signature.
resource |
---|
0d6ecccc9121fafabd87f6e6a8e05137_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
WideCharToMultiByte
GetSystemTime
GetPrivateProfileStringA
CloseHandle
ReadFile
lstrcatA
CreateThread
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
OutputDebugStringA
LoadLibraryA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
lstrcpyA
lstrcmpA
Sleep
CreateFileA
VirtualProtect
RtlUnwind
PostThreadMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
FindWindowA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenUrlA
shutdown
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ