getActiveDesktop
getSpecials
getSplit
getWnd
Static task
static1
Behavioral task
behavioral1
Sample
467d976bb3d7ba72751a2454bbdf6013_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
467d976bb3d7ba72751a2454bbdf6013_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
467d976bb3d7ba72751a2454bbdf6013_JaffaCakes118
Size
34KB
MD5
467d976bb3d7ba72751a2454bbdf6013
SHA1
985a401cd6b921d1f40e88ec6def1eec9d3855bb
SHA256
4b6685cc9175bc0e08f0f2907eda2a62e29d7b4b20014e90bb26fb208807b1c0
SHA512
024afd0f6f7815f7d41316c058ec836503a04ceb9124e5e6f3f105abbdf0ce9b1471f3bfe2bcae1719129c9742b30ad49d247355d229c07feed55fc8e3766100
SSDEEP
768:fj4FqLtZ4VHxzaw0CqjPXnk0UifS9QXdi8YUeDGq6bBtheCD:L4QLtyVHxOnUiq9QNPYUeDGJbBtD
Checks for missing Authenticode signature.
resource |
---|
467d976bb3d7ba72751a2454bbdf6013_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CallNextHookEx
NtClose
getActiveDesktop
getSpecials
getSplit
getWnd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE