KeyboardProc
UnHook
installhook
Static task
static1
Behavioral task
behavioral1
Sample
45721e82d415e0b70ceacdc62500b169_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
45721e82d415e0b70ceacdc62500b169_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
45721e82d415e0b70ceacdc62500b169_JaffaCakes118
Size
14KB
MD5
45721e82d415e0b70ceacdc62500b169
SHA1
c0ef773d9276735da851c4152c78e63b90ed32fc
SHA256
05d46da776259bd9a2f64f6d6ad74016f3a0c2da0bf8612964db3c30ca91463d
SHA512
eb95b07065fddbed3d18f0a1fe16cfa080dc041341d87e9d520cf3054c7f89e59b9ee2ce5c5265b989b87d93221ec04f32d99ed094b5252b1d5266a86700d743
SSDEEP
192:NF0CXGiVFfWQ3Vi061FkYmhpuRjMMTu+Fh0kTbu5bIRiBSPjOVexsbiZAoz:NFDL3Fi0BhpeBDT0gsERUSPjOVrxoz
Checks for missing Authenticode signature.
resource |
---|
45721e82d415e0b70ceacdc62500b169_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ord4486
malloc
UnhookWindowsHookEx
KeyboardProc
UnHook
installhook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE