FlushBuffer
SaveE
SetLOpt
StartL
StopL
WLELock
WLELogoff
WLELogon
WLEShutdown
WLEStartScreenSaver
WLEStartup
WLEStopScreenSaver
WLEUnlock
Static task
static1
Behavioral task
behavioral1
Sample
2582953c68038fcb50e8ac5225b62da3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2582953c68038fcb50e8ac5225b62da3_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2582953c68038fcb50e8ac5225b62da3_JaffaCakes118
Size
15KB
MD5
2582953c68038fcb50e8ac5225b62da3
SHA1
0a819771a1d7b1215ab0652d55c514ac0c072826
SHA256
d7deea376537fb5cde449030bdff3a3ac0d215be6e566ac9acc4478421ddd6cf
SHA512
de2a6ef0415372058fe7ffe4c1004bbab081997330f814093f4597692232c77b0c950ca371deb1e03798147a2fdb64c26df420a5f2ae0a5ecd91eba682fc2fb2
SSDEEP
192:SC0itFaWlB2SYxmJzTQsoHImVigU6d984blsckwLsBb/d6T+z9SCqGfFMKnp:SCb662ZWzh3ws1Jb/KU9SCq8FMKp
Checks for missing Authenticode signature.
resource |
---|
2582953c68038fcb50e8ac5225b62da3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strcat
strcpy
_mbsnbcmp
strftime
localtime
time
sprintf
_mbsnbcpy
_mbscmp
memcpy
fclose
fwrite
??3@YAXPAX@Z
memset
_mbsrchr
memmove
??2@YAPAXI@Z
??1type_info@@UAE@XZ
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_CxxThrowException
_EH_prolog
strlen
__CxxFrameHandler
fopen
??0exception@@QAE@ABV0@@Z
WideCharToMultiByte
GetModuleFileNameA
DisableThreadLibraryCalls
SetFileAttributesA
CloseHandle
CreateProcessAsUserA
GetWindowTextA
GetForegroundWindow
SetWindowsHookExA
UnhookWindowsHookEx
GetKeyState
GetAsyncKeyState
CallNextHookEx
FlushBuffer
SaveE
SetLOpt
StartL
StopL
WLELock
WLELogoff
WLELogon
WLEShutdown
WLEStartScreenSaver
WLEStartup
WLEStopScreenSaver
WLEUnlock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ