Endkeyhook
Setkeyhook
Static task
static1
Behavioral task
behavioral1
Sample
fcc627f2d1b9b9a7957a7ecf934fafc9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fcc627f2d1b9b9a7957a7ecf934fafc9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fcc627f2d1b9b9a7957a7ecf934fafc9_JaffaCakes118
Size
81KB
MD5
fcc627f2d1b9b9a7957a7ecf934fafc9
SHA1
b0977a752f41f1fb4568ad8dabef8fa059bc9e17
SHA256
8117dfa06f304685d0b2fa0e5fbadb32b33d6483783623f61fa9fffac95d16c9
SHA512
2f7c790bc5dce741fab4de31a6ffeb5994102a30a8b561e163a9cd0792605ab0df1cc7e23935b8bb01ed9456dbe71074f6afa0a6df4ea6efc3d513dd6d5aa33b
SSDEEP
1536:13iVqvQXjd4FLGKNYgllLMv0h4KcSlhJ86wLPxQ:9i5JKOClLMv0WKcSlk6wLPxQ
Checks for missing Authenticode signature.
resource |
---|
fcc627f2d1b9b9a7957a7ecf934fafc9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Endkeyhook
Setkeyhook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ