InstallHook
KeyboardProc
MouseProc
UninstallHook
Static task
static1
Behavioral task
behavioral1
Sample
b6486436c64d410389afddba41d65b95_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b6486436c64d410389afddba41d65b95_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b6486436c64d410389afddba41d65b95_JaffaCakes118
Size
24KB
MD5
b6486436c64d410389afddba41d65b95
SHA1
5f924d99c6cc47586a8b21197955e189365507a2
SHA256
59b60911a3d398569b29435be4d533a41aa1d28b8fffa046163eaeba8bb5b04f
SHA512
c88addfcc9bf876ecef971686024d1883f694c0f5eef28fc5612298f2e5a4df4adde67910c6f206f7cecfb83979d7ca8c993dc830400accbe22b033699672bac
SSDEEP
192:n+/q9y/MipSZbHvtQAUc03kk/4KVrGELLs/9cuXS58P:n+/q4Eip0Qzc0/4+1PWmuX48P
Checks for missing Authenticode signature.
resource |
---|
b6486436c64d410389afddba41d65b95_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
CallNextHookEx
GetKeyboardState
PostMessageA
SetWindowsHookExA
ToAscii
UnhookWindowsHookEx
InstallHook
KeyboardProc
MouseProc
UninstallHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ