Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
27cb435366ecad267491c9440da51d95_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27cb435366ecad267491c9440da51d95_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
27cb435366ecad267491c9440da51d95_JaffaCakes118
Size
18KB
MD5
27cb435366ecad267491c9440da51d95
SHA1
9bbb90961d1eae6b47f6a530b758336021c03dfd
SHA256
02c2fcddf00e1491a7967b5530478ea3c7f7bc0e397c5c550e6b7c9dae65b015
SHA512
fab742fa3a323ae85ab1e837eccd7885ded99ec7877b83f0acda07641b58762288a503de48a9e9d0b2156e22e27f503b5ff9a7cbdd40d059ebafb643fdc78249
SSDEEP
384:TSfVVH9ga2YFydSva91kRg5W4+PtLoP3a1xdTdvxfhReXPySyMDvo:2OSva9OR7V71xldpfTIc
Checks for missing Authenticode signature.
resource |
---|
27cb435366ecad267491c9440da51d95_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
IsBadReadPtr
lstrcpyA
lstrcmpA
ExitProcess
lstrcmpiA
Sleep
lstrlenA
GetTickCount
lstrcpynA
WritePrivateProfileStringA
GetSystemTime
GetTempPathA
GetPrivateProfileStringA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
CreateThread
UnmapViewOfFile
OutputDebugStringA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ