a
b
Static task
static1
Behavioral task
behavioral1
Sample
b1b12be56bec0cd2fccb393f7db82fc4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b1b12be56bec0cd2fccb393f7db82fc4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b1b12be56bec0cd2fccb393f7db82fc4_JaffaCakes118
Size
7KB
MD5
b1b12be56bec0cd2fccb393f7db82fc4
SHA1
c8cf0417335716971eaab321ce91b13c196927a0
SHA256
a0726f1a1cf94dd01aae2d5e3c6706e09d9442480fcaaf098d9b17bc5a05a25a
SHA512
28381b30cd3816d45f73234c83facbdf46d9b41bb5313249593d361b341d102e4e87f9f1f1b3b1bf9570599ca9a4222fec072d74fdb3d9de60d7af5db68ac2e0
SSDEEP
48:KJm/Ut9sG2yVgb5kUYPrjJGJ4BejfxRWwYq5r/I1G91Rz8l3070iEF5ZoVmOLla6:G9sGhVgb+rnkzxkBq57RRs3qiT5Ie0P
Checks for missing Authenticode signature.
resource |
---|
b1b12be56bec0cd2fccb393f7db82fc4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UnhookWindowsHookEx
ToAscii
SetWindowsHookExA
GetWindowTextA
GetKeyboardState
GetForegroundWindow
CallNextHookEx
wsprintfA
CreateFileA
lstrlenA
lstrcpyA
lstrcatA
WriteFile
SetFilePointer
GetWindowsDirectoryA
GetFileSize
CloseHandle
CreateDirectoryA
a
b
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ