BeginKeybrdHook
BeginMouseHook
EndKeybrdHook
EndMouseHook
Static task
static1
Behavioral task
behavioral1
Sample
e2552ee0e878072e9831e4a3b490a638_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e2552ee0e878072e9831e4a3b490a638_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e2552ee0e878072e9831e4a3b490a638_JaffaCakes118
Size
173KB
MD5
e2552ee0e878072e9831e4a3b490a638
SHA1
37a2413248500b29a98bf514aef7cf2f2a218a67
SHA256
f1efb3f32d87e7e9a616545b35b300b15b7d9612d9e4b0552e1e3b9c78704228
SHA512
9b7bb0581e5a89f54ba4b18c375251bd423ac916be98bb81eadffbd15ed71f077a7bae88cc0597c06bd4d24acde6a35de40d3a5b9bd2c5152e1ee864693334bb
SSDEEP
3072:NmBs6Y8NYBn8MQoyNgwfUxrkoU3Q+Y3+KMEoPdy2hm4xMAinwIx7575M:Nm6BRnBiCwfP13rY3+5Eo1yefZ7I37K
Checks for missing Authenticode signature.
resource |
---|
e2552ee0e878072e9831e4a3b490a638_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
BeginKeybrdHook
BeginMouseHook
EndKeybrdHook
EndMouseHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE