SetHook
SetKeyboardFilterHook
SetMouseFilterHook
StartKeyLogger
StopKeyLogger
UnSetHook
Static task
static1
Behavioral task
behavioral1
Sample
b915d4d13282b2de7cd9dd3fa3a9d166_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b915d4d13282b2de7cd9dd3fa3a9d166_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b915d4d13282b2de7cd9dd3fa3a9d166_JaffaCakes118
Size
9KB
MD5
b915d4d13282b2de7cd9dd3fa3a9d166
SHA1
1aac732c2bcea537c3330c41b282823470a852e2
SHA256
e2ea16165b09c6f6c2c2129c016f6d2f45b4e0f61dabdf1b05c912b8c1d97168
SHA512
149b0308853c2fd019ca40249cac678f56b6056e33c1100fa945b4c80c0a380ffe554f954778f371ef0cfc14cfb60972b53e43232e632a9a949cfe2216ae4944
SSDEEP
192:SIUCzpFbwlSvOEvgjagel5A+GDYiViylG3WSUs6WG:SFCzpeUTg2E+yVlmWSUs6WG
Checks for missing Authenticode signature.
resource |
---|
b915d4d13282b2de7cd9dd3fa3a9d166_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyA
lstrlenA
GetLocalTime
CloseHandle
WriteFile
SetFilePointer
lstrcmpiA
GetModuleFileNameA
lstrcatA
GetWindowsDirectoryA
GlobalAddAtomA
GlobalDeleteAtom
HeapFree
GetProcessHeap
CreateFileA
HeapAlloc
wsprintfA
GetKeyboardState
SetWindowsHookExA
UnhookWindowsHookEx
RemovePropA
EnumWindows
ClientToScreen
GetClientRect
PostMessageA
IsWindowVisible
GetWindowRect
GetCursor
SetPropA
GetPropA
GetUpdateRgn
RegisterWindowMessageA
GetParent
GetWindowTextA
CallNextHookEx
ToAscii
GetRegionData
CreateRectRgn
DeleteObject
SetHook
SetKeyboardFilterHook
SetMouseFilterHook
StartKeyLogger
StopKeyLogger
UnSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ