getActiveDesktop
getSpecials
getSplit
getWnd
Static task
static1
Behavioral task
behavioral1
Sample
66f5be793e77fa953f5ec0ee354c981c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
66f5be793e77fa953f5ec0ee354c981c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
66f5be793e77fa953f5ec0ee354c981c_JaffaCakes118
Size
34KB
MD5
66f5be793e77fa953f5ec0ee354c981c
SHA1
f0b5982cd4dd733d3ded123a5acb890d0bca2769
SHA256
8a65e93de91eedff1d7ab1f73b00588f75b7cc959c6bde5940eb260c83456e72
SHA512
dc6c38166cd2dcc8e2e7a2c7c5714524b113a087d5d7e57678d1b741488059defe6952212084f3ab353e0167574e22fe054452c4739f4034433de9a32ed38266
SSDEEP
768:NryNwvHTqYgFVy+q146yvEJqJewBUbNtzrllXR:gNoHTHgFVyJ14JvEgJlyNNr/X
Checks for missing Authenticode signature.
resource |
---|
66f5be793e77fa953f5ec0ee354c981c_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CallNextHookEx
NtClose
getActiveDesktop
getSpecials
getSplit
getWnd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE