KeyboardHook_GetDataLL
KeyboardHook_Start
KeyboardHook_StartLL
KeyboardHook_Stop
KeyboardHook_StopLL
KeyboardHook_UpdateHook
KeyboardHook_UpdateHookLL
Static task
static1
Behavioral task
behavioral1
Sample
0fb0d5571cdc2e33af41cdf5e524d51d_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0fb0d5571cdc2e33af41cdf5e524d51d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0fb0d5571cdc2e33af41cdf5e524d51d_JaffaCakes118
Size
56KB
MD5
0fb0d5571cdc2e33af41cdf5e524d51d
SHA1
c9af957e339ceb7f514ef0d1242d7cd692e587e0
SHA256
99eebe63bdf2cadee6ad64a650b8654ae09a9565182ce387527cfc5f251b25b8
SHA512
778afac90079ecf716474d48e298e4b17ae96a33a911e7c9506aadc6b25bc63f3447b505757e5fb0e2048cdf2509a18e99ab757d8ac3865e9b3728b714a23b30
SSDEEP
384:y4QeNUMctnlYI2/LNHT6zXhIdxPe4NQ/PDW:y4QlbtnlYI05mX0x25/C
Checks for missing Authenticode signature.
resource |
---|
0fb0d5571cdc2e33af41cdf5e524d51d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
KeyboardHook_GetDataLL
KeyboardHook_Start
KeyboardHook_StartLL
KeyboardHook_Stop
KeyboardHook_StopLL
KeyboardHook_UpdateHook
KeyboardHook_UpdateHookLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE