GetKState
SetMainHandle
SetMsgToSend
StartHook
StopHook
Behavioral task
behavioral1
Sample
8d8d89cec0627e914e3e7916cd87fd05_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8d8d89cec0627e914e3e7916cd87fd05_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8d8d89cec0627e914e3e7916cd87fd05_JaffaCakes118
Size
35KB
MD5
8d8d89cec0627e914e3e7916cd87fd05
SHA1
dd7da887f369264f494f2a235fbc9b677dea75fe
SHA256
fbcd8245650b47b4c3deba6607b81da2ce85412d8ec05a637829b04c0eb915d2
SHA512
ad1a7649290ff6269b01f07185b9431447fc0000196e1fc8c8dd71c84186cd79819c9028c0510990059588046c1873034baace2fda0c6662a4578830f71f85e1
SSDEEP
192:nwxD4tAH6M66t6QyP/BI8a83d17dWyDbjcUd:NtJf1/C8aC8OL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8d8d89cec0627e914e3e7916cd87fd05_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
LocalFree
GetCurrentThreadId
GetStartupInfoA
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetKeyboardType
MessageBoxA
UnhookWindowsHookEx
SetWindowsHookExA
SendMessageA
GetKeyboardState
GetForegroundWindow
CallNextHookEx
GetKState
SetMainHandle
SetMsgToSend
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE