InstallKeyboardHook
KeyboardProc
SetOptions
UnInstallKeyboardHook
Static task
static1
Behavioral task
behavioral1
Sample
e281674ce3c3cda69dab5a67d8ca946c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e281674ce3c3cda69dab5a67d8ca946c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e281674ce3c3cda69dab5a67d8ca946c_JaffaCakes118
Size
6KB
MD5
e281674ce3c3cda69dab5a67d8ca946c
SHA1
ab8bdb0356d16d9a65b645b49541e657e9b868df
SHA256
c7a62aa376d105363dcccc6799e2526c8f7726c1469454b0f2fe924ee4369863
SHA512
1671a4233d4a55e0a9af3fe753433d51cae5a2caa1f5d08c36eef1cd040892e4a6e5591bd85d1b6aacf7b602ea1f35a8a80dba12437102f039b2b0260e37048d
SSDEEP
96:MGrZO1vgRHs+3y6+kWaxl8+7xp4hBXUq/pXj+aCtoKF/T:lrZO1YRHs+b+kWaQaoBXUq94FF/T
Checks for missing Authenticode signature.
resource |
---|
e281674ce3c3cda69dab5a67d8ca946c_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpA
WriteFile
lstrlenA
SetFilePointer
CreateFileA
lstrcpyA
SetEndOfFile
IsBadStringPtrA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
IsDebuggerPresent
TerminateProcess
GetLocalTime
CloseHandle
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
MessageBeep
GetForegroundWindow
GetWindowTextA
GetKeyboardLayout
GetKeyboardState
ToAscii
wsprintfA
GetUserNameA
InstallKeyboardHook
KeyboardProc
SetOptions
UnInstallKeyboardHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ