Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
174ffc71d7d019c39a8132cffe76d238_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
174ffc71d7d019c39a8132cffe76d238_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
174ffc71d7d019c39a8132cffe76d238_JaffaCakes118
Size
13KB
MD5
174ffc71d7d019c39a8132cffe76d238
SHA1
6f460926460ac17845328c4751f2ccf78cca06aa
SHA256
02de191ae1392f899004e90e2ae2ce35818eaa5459e978dfa349c54cef8ca55c
SHA512
0710cca05d422c07e968fe417b7b6b6867419d1f8a451f8cffdb43d684809b8927c3875c10f50503497318527521d492614edaffe2c0b840e38d5888f59e7d9d
SSDEEP
192:/mhiIRtvoolLFPf6Cxp6Ra1qAv405Q+dL+73qz38rc:OIMvoedf6Cxp6RaYAi+dR8Q
Checks for missing Authenticode signature.
resource |
---|
174ffc71d7d019c39a8132cffe76d238_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OutputDebugStringA
VirtualProtect
Sleep
lstrcmpA
lstrcatA
lstrcmpiA
lstrcpyA
ExitProcess
lstrlenA
GetTickCount
lstrcpynA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
WritePrivateProfileStringA
GetTempPathA
ExpandEnvironmentStringsA
GetPrivateProfileStringA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
CreateThread
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
CallNextHookEx
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ