SetAppWindowHandle
StartKeyHook
StartMouseHook
StartMsgHook
StartShellHook
StopKeyHook
StopMouseHook
StopMsgHook
StopShellHook
Static task
static1
Behavioral task
behavioral1
Sample
25733876bbe022bff8337f987d41f019_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
25733876bbe022bff8337f987d41f019_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
25733876bbe022bff8337f987d41f019_JaffaCakes118
Size
36KB
MD5
25733876bbe022bff8337f987d41f019
SHA1
2625af3549de2fb726e14d966a8dc19b1777bbbd
SHA256
8dda00be6889ce02407815c6ad6855a8e051c0744e9febd4ceaf815840db589c
SHA512
614e078d364a530bbe602177714e8888d19c60ca9f91cee15e504bbbdd3c94e14a9d871922c3c546a21e1ba580814930fa8f1456ce7ad9f7d2e6a81cfe1222cf
SSDEEP
384:ewGUxib/ZJwUpTEB8aXdRxhkmlYnjuaygIglnoIo9depGs/:ewGUx+BSUpTEBNRx+lSgloIo9spG
Checks for missing Authenticode signature.
resource |
---|
25733876bbe022bff8337f987d41f019_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImmGetCompositionStringA
ImmGetContext
ImmReleaseContext
GlobalAddAtomA
GetModuleFileNameA
GetEnvironmentStrings
WideCharToMultiByte
RtlUnwind
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
LCMapStringW
HeapAlloc
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetProcAddress
LoadLibraryA
LCMapStringA
SetWindowsHookExA
GetWindowTextA
PostMessageA
CallNextHookEx
UnhookWindowsHookEx
SetAppWindowHandle
StartKeyHook
StartMouseHook
StartMsgHook
StartShellHook
StopKeyHook
StopMouseHook
StopMsgHook
StopShellHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ