InstallHook
UninstallHook
Static task
static1
Behavioral task
behavioral1
Sample
2fff8174a2052b60f4ae093ae48cdf01_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2fff8174a2052b60f4ae093ae48cdf01_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2fff8174a2052b60f4ae093ae48cdf01_JaffaCakes118
Size
60KB
MD5
2fff8174a2052b60f4ae093ae48cdf01
SHA1
bc1acd382cba3eb06dacb78244ac5059e6517fcb
SHA256
fd9f970a997a9d22b49e768b74dbe6e14eb7af71a84c2094980d397a35257319
SHA512
7504ad0e1c4075ffce1fc242360bd8c14ec7545884e683e31c6134beff42c398006ee9ccd2bf961462b8b15f0a8758491ca71c41c95672647e2e84d616879070
SSDEEP
768:S5bm2RwuzKGRyTVFvlu4wjxTPu+bWn/m5RbeuwteL5Q5xoZGl:Wbm2N3RyTV3unxPoMtmoZGl
Checks for missing Authenticode signature.
resource |
---|
2fff8174a2052b60f4ae093ae48cdf01_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessW
OutputDebugStringW
VirtualProtect
FlushInstructionCache
GetCurrentProcess
SetLastError
GetProcAddress
LoadLibraryA
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetCPInfo
GetACP
GetOEMCP
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx
InstallHook
UninstallHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ