GetLastData
ReleaseKeyboardHook
SetKeyboardHook
Static task
static1
Behavioral task
behavioral1
Sample
0ea2c2c3187825b582f78bd1b2a7aac2_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0ea2c2c3187825b582f78bd1b2a7aac2_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0ea2c2c3187825b582f78bd1b2a7aac2_JaffaCakes118
Size
32KB
MD5
0ea2c2c3187825b582f78bd1b2a7aac2
SHA1
0ca7ef96c83be8c67ea206fd9e382f3bd4c8aa43
SHA256
48cffadcccdc4e92a4890902c032fae6f2c46fcb1f197cd3c9d0a3028f27c1a5
SHA512
9c3029e7daf9c88e692effbce6b27c214f43d5558298fcb6d914f77ba17fb5f47353537eb41ab7be7e5bb9fbe446246276eb81c15c9088748be218fa2e30975e
SSDEEP
384:aY4gQtZnEMpTKJP3D71mlrA+5yssm/voIo9YJ:XZMpTKhz7+HVoIo9Y
Checks for missing Authenticode signature.
resource |
---|
0ea2c2c3187825b582f78bd1b2a7aac2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedExchange
Sleep
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
CallNextHookEx
PostMessageA
SetWindowsHookExA
UnhookWindowsHookEx
GetLastData
ReleaseKeyboardHook
SetKeyboardHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ