EnHookWindow
UninstallHook
sub_getmessage
sub_keyboard
sub_mouse
sub_pic
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
d8963db37b5858d21a746d0b9ea59b4f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d8963db37b5858d21a746d0b9ea59b4f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d8963db37b5858d21a746d0b9ea59b4f_JaffaCakes118
Size
15KB
MD5
d8963db37b5858d21a746d0b9ea59b4f
SHA1
3664a199e1107ae1af95d18a8beba344315808e2
SHA256
fa7452b71a872de68230e2cf2e8ad8951f6d6efa72db6bb983eabd5543125b52
SHA512
cab0072f9b655ead26c482ddb350ed7ef6562d5fe7195c6555b7a5842c224a1647f58f552ab629e8ae0762e1767696bbcd40838fe86e6084733f34b3c2c9a91c
SSDEEP
384:qreePuSKaNl7HjRe8pewrhzAYnVRATxiop:GP97l08pbNzAYnPAIK
gozi
Checks for missing Authenticode signature.
resource |
---|
d8963db37b5858d21a746d0b9ea59b4f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
EnHookWindow
UninstallHook
sub_getmessage
sub_keyboard
sub_mouse
sub_pic
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE