Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
17932061b1fea2d77e4cb8167db01800_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
17932061b1fea2d77e4cb8167db01800_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
17932061b1fea2d77e4cb8167db01800_JaffaCakes118
Size
18KB
MD5
17932061b1fea2d77e4cb8167db01800
SHA1
06e373149414daad6e1a52e4087f0ded1d238731
SHA256
1609369dcb8328def467f88e42f056bea981996d71d63f9f139f96bc24c1781a
SHA512
4bd2332987482c12a92070a259590515e0f5b776061c313340d29976038aeba96445f594cb700cf5ad00ab6b45b4e34e93e0ecd4a549f135ebcaf8978d145c0a
SSDEEP
384:dSYFF2evU3zTBLKsMe//91c7Wk4vOHXSlATdvnHbhW3PySvGE:rBUJ/9eaXWilSdPHlK3
Checks for missing Authenticode signature.
resource |
---|
17932061b1fea2d77e4cb8167db01800_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
IsBadReadPtr
lstrcpyA
lstrcmpA
ExitProcess
lstrcmpiA
Sleep
lstrlenA
GetTickCount
lstrcpynA
WritePrivateProfileStringA
GetSystemTime
GetTempPathA
GetPrivateProfileStringA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
CreateThread
UnmapViewOfFile
OutputDebugStringA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ