DoPopup
GetXGEoThreadHandle
InitParam
InstallKeyHook
SetHotKey
UninstallKeyHook
Static task
static1
Behavioral task
behavioral1
Sample
16ad389017aae7b00b673904dadbc63b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16ad389017aae7b00b673904dadbc63b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
16ad389017aae7b00b673904dadbc63b_JaffaCakes118
Size
230KB
MD5
16ad389017aae7b00b673904dadbc63b
SHA1
f0a95acea4f2aaca86ce50e96c1cb6a7c273e9e6
SHA256
3677362719b9593a346e564c2bea78ff673d2f5e55a1f881d4d2f0ffa4ac1b57
SHA512
fe073f8a5592f2334bbf84aaf603214c0ff953fd090f03ad49297326ea0a7c16b6611de64b87935f820a6c85c4e276d63c676a7725205d6de995d3d3a8c7f459
SSDEEP
6144:9r3MjYbu4/RbUEsGi5BItlw5q0hftF9yDUV7yb35K5n8YlJhz1:QYbj5sGi5B4wkFDUO35Kddn5
Checks for missing Authenticode signature.
resource |
---|
16ad389017aae7b00b673904dadbc63b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DoPopup
GetXGEoThreadHandle
InitParam
InstallKeyHook
SetHotKey
UninstallKeyHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE