DisableKeyboardHookWin9X
EnableKeyBoardHookWin9X
StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
5ef1c0f3442bc985a11b05fa9732a51d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ef1c0f3442bc985a11b05fa9732a51d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ef1c0f3442bc985a11b05fa9732a51d_JaffaCakes118
Size
23KB
MD5
5ef1c0f3442bc985a11b05fa9732a51d
SHA1
a02d5c1ae795c63177e2e12956bda3cdd54991b0
SHA256
78942157ccade6420062f29a1c1d8614b1321bbaf4bf862403322d2e2c9d07ab
SHA512
954ba3aa8b1b2347b8fc7151246cb2eec50dff355d948982df3e7ae15f41241d9266097c129994d7ee814d2a9693a07b9fb2f079be3e38a16c3380d4d3799e32
SSDEEP
384:yk1Q9KaonyAY1hen74j85EMVNoi+1Rvk2zQwBj4cmBuKZp8teGvw+fI:8KzyrIU8mMb3+zk2ZFrmBzzA9I
Checks for missing Authenticode signature.
resource |
---|
5ef1c0f3442bc985a11b05fa9732a51d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DisableKeyboardHookWin9X
EnableKeyBoardHookWin9X
StartHook
StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE