?GetQQ@@YAKPAK@Z
?UnHook@@YAHXZ
?b_Focus@@YAHXZ
KeyboardProc
installhook
Behavioral task
behavioral1
Sample
773ca0ef9ffbe2bfa2083d119dde6181_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
773ca0ef9ffbe2bfa2083d119dde6181_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
773ca0ef9ffbe2bfa2083d119dde6181_JaffaCakes118
Size
137KB
MD5
773ca0ef9ffbe2bfa2083d119dde6181
SHA1
c09a20279971179ff85f434ed9b87d59fe58466a
SHA256
8f9eee314f484f9888fd639e344497878c1bad445a7998790068bc535df33686
SHA512
3f8b394af01489ed544f3f32f503e0fd6b65a76f286b70f8e5504aaaa4ec353941305f8568ece353b4b178595dccfcc90698e484053686ba58bd26ecf4e9ffc4
SSDEEP
1536:/C8ujFtY5n+iF2d89td/Qb3jhnS9Qj56PDaugrE4lNOzfO91CqdLlVT8jN2wQFLD:/Cp4nInTsPPgrE4mzfOv9lH5ANEn9
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
773ca0ef9ffbe2bfa2083d119dde6181_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetQQ@@YAKPAK@Z
?UnHook@@YAHXZ
?b_Focus@@YAHXZ
KeyboardProc
installhook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE