GetWndHnd
InitKeyMap
KeyboardHook
SetAPSPhonetic
SetApp
SetDefNum
SetDllHook
SetHotKey
SetLang
SetLangFlag
SetRomnagari
SetWinMsg
UseAltAsInv
Static task
static1
Behavioral task
behavioral1
Sample
fd90b40bb8210b66ad3c3f1da622c32f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fd90b40bb8210b66ad3c3f1da622c32f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fd90b40bb8210b66ad3c3f1da622c32f_JaffaCakes118
Size
122KB
MD5
fd90b40bb8210b66ad3c3f1da622c32f
SHA1
914a38c7c9c60d8adcd33412ee6a0effa9e66fda
SHA256
ddd854d7533fd6d01735dbeffd2083c88ab6d052faab2b084b15a8753e89ce4c
SHA512
31d58e38e8cde85d86a63d4b36cca3d030be49fb348b992a28cedeb9dddf693199e1ce9bc3ffff606a72c769ab5598348d6c562ed8e1a36f7cb4e3f849b9c31f
SSDEEP
1536:m6gH4Edrt6eoka6+hDZ50OrV1W4TulGqCOlK20yBk9nyf8i6PZb+BnRc+Ez4:mdH4fka6Cl50OZTPOTtBk5yN6PeRc0
Checks for missing Authenticode signature.
resource |
---|
fd90b40bb8210b66ad3c3f1da622c32f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetStdHandle
_lread
CreateFileA
GetStartupInfoA
GetFileType
SetFilePointer
SetStdHandle
CloseHandle
FlushFileBuffers
LoadLibraryA
VirtualAlloc
HeapFree
HeapAlloc
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
_lclose
GetEnvironmentStrings
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
VirtualFree
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FindWindowA
GetActiveWindow
SendMessageA
GetAsyncKeyState
WaitMessage
GetFocus
PostMessageA
CallNextHookEx
GetKeyState
UnhookWindowsHookEx
GetWndHnd
InitKeyMap
KeyboardHook
SetAPSPhonetic
SetApp
SetDefNum
SetDllHook
SetHotKey
SetLang
SetLangFlag
SetRomnagari
SetWinMsg
UseAltAsInv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE