InstallHook
UninstallHook
Static task
static1
Behavioral task
behavioral1
Sample
42afe56a9c774e59ec41e87d1798363c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42afe56a9c774e59ec41e87d1798363c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
42afe56a9c774e59ec41e87d1798363c_JaffaCakes118
Size
4KB
MD5
42afe56a9c774e59ec41e87d1798363c
SHA1
4b8bad61396b6ba225bf28be40e84c4a941f2e15
SHA256
b60934b63b1226437a250a6bbc04c0fd1539a2d258e395300f44875a562b77f2
SHA512
83614ff2820b7335765bdbaec88292afa01bb4c2fefe522d06117cabe9766fbc848d3e1fcdce439860986260bcdfd27a9a3e8148ce9fc99c43a08e3c789109e8
SSDEEP
48:ytcbOwBLaa2gOaFqMJOxI9bBzkCggQZCbLb/v:HlBLaa2gOa3OxI9IgQ2L
Checks for missing Authenticode signature.
resource |
---|
42afe56a9c774e59ec41e87d1798363c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UnhookWindowsHookEx
SetWindowsHookExA
GetWindowTextA
GetFocus
GetActiveWindow
CallNextHookEx
wsprintfA
lstrlenA
lstrcpyA
lstrcmpA
CloseHandle
CreateFileA
IsDBCSLeadByte
RtlZeroMemory
SetEndOfFile
SetFileAttributesA
SetFilePointer
_lwrite
lstrcatA
ImmReleaseContext
ImmGetContext
ImmGetCompositionStringA
InstallHook
UninstallHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ