InstallHook
UninstallHook
Static task
static1
Behavioral task
behavioral1
Sample
27bd8f62ff3b8a0e47aaa4bf0b3c01e0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27bd8f62ff3b8a0e47aaa4bf0b3c01e0_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
27bd8f62ff3b8a0e47aaa4bf0b3c01e0_JaffaCakes118
Size
60KB
MD5
27bd8f62ff3b8a0e47aaa4bf0b3c01e0
SHA1
596edbe53b3744cd00fc392dd9ad82154c6239e3
SHA256
aec650774d13a34e663bb6e493c3a850b9ca92e2dd21b7d54599b18de2209086
SHA512
f33c9e5a07fd79fcbf100d2d19b5ede6e65b90e54f4670b2353d631eaed36baf916ffbfc0140890bf421d972dffa2dde50e77bc39bd9fcddb0b7cd5affc0a3ce
SSDEEP
768:S5bm2RwuzKGRyTVFvlu4wjxTPu+bWn/m5RbeuwteL5Q5xoZGrC:Wbm2N3RyTV3unxPoMtmoZGrC
Checks for missing Authenticode signature.
resource |
---|
27bd8f62ff3b8a0e47aaa4bf0b3c01e0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessW
OutputDebugStringW
VirtualProtect
FlushInstructionCache
GetCurrentProcess
SetLastError
GetProcAddress
LoadLibraryA
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetCPInfo
GetACP
GetOEMCP
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx
InstallHook
UninstallHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ