??0CHook@@QAE@XZ
??1CHook@@UAE@XZ
??_7CHook@@6B@
?HookInstaller@CHook@@QAEPAUHHOOK__@@XZ
?HookUninstaller@CHook@@QAEHXZ
_HookProc@12
_KeyboardProc@12
Static task
static1
Behavioral task
behavioral1
Sample
c090e77d8bdbf8cae2b2f092cb0e36aa_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c090e77d8bdbf8cae2b2f092cb0e36aa_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c090e77d8bdbf8cae2b2f092cb0e36aa_JaffaCakes118
Size
32KB
MD5
c090e77d8bdbf8cae2b2f092cb0e36aa
SHA1
a47d5be38e898298ecfdbf48625857e44dc2b027
SHA256
bd8231a027ec8aa194886f4467358639064a88f9fc47b2471cfdc97481ccb767
SHA512
2e5c9edf714a9f7dfb2f0ae6c4e69fb25b9955f8e15785369e11a910355a852c9c2d1239b75b76040d784bd919bdf2a7eee1d7ce848db57f23dcb6ee62eb036a
SSDEEP
192:+FaTHKgsdT318eF3brukLDRsiUCsieCNSpfwBB72:+FaT1sl3fHeZpfwj2
Checks for missing Authenticode signature.
resource |
---|
c090e77d8bdbf8cae2b2f092cb0e36aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord825
ord1168
ord1253
ord342
ord823
ord1182
ord3663
ord665
ord1979
ord2915
ord926
ord941
ord939
ord860
ord800
ord858
ord2820
ord3811
ord540
ord6283
ord6282
ord537
ord2764
ord5186
ord354
ord6385
ord535
__CxxFrameHandler
?terminate@@YAXXZ
free
_initterm
malloc
_adjust_fdiv
sprintf
_strdup
_strlwr
_strupr
strlen
_mbscmp
_EH_prolog
_except_handler3
memset
strcat
CloseHandle
CreateFileMappingA
Sleep
MapViewOfFile
UnmapViewOfFile
GetWindowTextA
GetWindow
GetParent
FindWindowExA
GetWindowLongA
MapVirtualKeyA
GetFocus
GetActiveWindow
CallNextHookEx
GetKeyState
SetWindowsHookExA
UnhookWindowsHookEx
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
??0CHook@@QAE@XZ
??1CHook@@UAE@XZ
??_7CHook@@6B@
?HookInstaller@CHook@@QAEPAUHHOOK__@@XZ
?HookUninstaller@CHook@@QAEHXZ
_HookProc@12
_KeyboardProc@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ