Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
434f6348db1a7216c61482eee87c286d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
434f6348db1a7216c61482eee87c286d_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
434f6348db1a7216c61482eee87c286d_JaffaCakes118
Size
18KB
MD5
434f6348db1a7216c61482eee87c286d
SHA1
dec56b9353e6542c0f3e693886a3c58fe99fa3aa
SHA256
12c816307c2252f5f7111f69214756e2b1a98c09f13e24a6a7e7d5cc90f751d6
SHA512
517b090d34ff34e345bfd60b173f0067bd5b837f370b78b9c0e05aa763fd9b6c118064dd7ff1bb5cf96ce3d68c1da40a2c8925685fbb81ff0cf36ea7c06ca8b9
SSDEEP
384:ghYstn7gcxan/Hy/5sQsn/6fAsS/pZTe0x:oY8nNx+/SxsQsWcxZTe0x
Checks for missing Authenticode signature.
resource |
---|
434f6348db1a7216c61482eee87c286d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
lstrcmpiA
lstrlenA
GetTickCount
lstrcpynA
WideCharToMultiByte
GetSystemTime
GetPrivateProfileStringA
CloseHandle
ReadFile
lstrcatA
CreateThread
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
OutputDebugStringA
LoadLibraryA
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
lstrcpyA
lstrcmpA
Sleep
CreateFileA
VirtualProtect
RtlUnwind
PostThreadMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
FindWindowA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenUrlA
shutdown
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ