Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Static task
static1
Behavioral task
behavioral1
Sample
3aafd5cea7ae76d1428874566014b27e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3aafd5cea7ae76d1428874566014b27e_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3aafd5cea7ae76d1428874566014b27e_JaffaCakes118
Size
22KB
MD5
3aafd5cea7ae76d1428874566014b27e
SHA1
20fb395c85e3a502376372960bb80d784fe579eb
SHA256
e2b77e97e9ecb16825c3e03a489fcdf920cee3f387df71c81715e4fa2ab0f745
SHA512
a8c6ce9a281fe8b73ca82aac5518b60df634d219bc6d07852901d88a448f88462b410f38b8d96f99fa352658cb90d2e75dcb55059d118bd1af0f52abafe255f3
SSDEEP
384:+Vjgya6H7GaDd0JUGbsYlxh5tawKrwwXEgZ28uo3ydLyU93OO3kPP:+L7G9HhHawKrDB2No3O936
Checks for missing Authenticode signature.
resource |
---|
3aafd5cea7ae76d1428874566014b27e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalLock
GlobalAlloc
GetTempPathA
Process32Next
Process32First
CreateToolhelp32Snapshot
WideCharToMultiByte
CreateThread
FreeLibrary
GetProcAddress
WriteFile
GetSystemDirectoryA
GetCurrentProcessId
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
GlobalUnlock
GlobalFree
MultiByteToWideChar
DeleteFileA
lstrcpynA
CreateFileA
ReadFile
CloseHandle
GetTickCount
lstrlenA
lstrcmpiA
lstrcatA
lstrcpyA
lstrcmpA
Sleep
ExitProcess
VirtualProtect
LoadLibraryA
OutputDebugStringA
UnhookWindowsHookEx
CallNextHookEx
GetForegroundWindow
EnumWindows
GetSystemMetrics
GetWindowTextA
IsWindowVisible
IsIconic
GetActiveWindow
PostThreadMessageA
SetForegroundWindow
ReleaseDC
GetDC
IsRectEmpty
GetWindowThreadProcessId
FindWindowExA
FindWindowA
PrintWindow
GetWindowInfo
ShowWindow
SetWindowsHookExA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
DeleteObject
CreateDCA
GetDeviceCaps
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
BitBlt
InternetConnectA
HttpSendRequestA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
HttpEndRequestA
InternetWriteFile
HttpSendRequestExA
HttpAddRequestHeadersA
InternetQueryDataAvailable
HttpOpenRequestA
GdipDisposeImage
GdipFree
GdiplusStartup
GdipAlloc
GdipLoadImageFromFile
GdipSaveImageToFile
GdiplusShutdown
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCloneImage
strstr
free
malloc
atoi
??3@YAXPAX@Z
wcscmp
??2@YAPAXI@Z
memmove
Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ