?HookOff@@YAHXZ
?HookOn@@YAHXZ
?KeyboardProc@@YGJHIJ@Z
?SetBossKey@@YAXH@Z
?SetGobackKey@@YAXH@Z
Static task
static1
Behavioral task
behavioral1
Sample
040dc45b4ab73280f4555c174606631e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
040dc45b4ab73280f4555c174606631e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
040dc45b4ab73280f4555c174606631e_JaffaCakes118
Size
32KB
MD5
040dc45b4ab73280f4555c174606631e
SHA1
e430d2eaa6af7c4e4bceef699e3368169869810d
SHA256
b6f53d85e8256686a03842a840a509b4b3fb9c20f2c715da309926d7785bab98
SHA512
7f7f3a02ffb01eee17090f67f67275a2f5c1676c5c60dcfdcefbefec4e4f050f0c51722503b04d43edced6fc1b94f2ddd98526c91aeffa176179c9e98c6e92ef
SSDEEP
384:4yLF/tTNBzD4B27lUmlE+iy7P1eY6BtFBu5H:LttTN9447eO1enBtFm
Checks for missing Authenticode signature.
resource |
---|
040dc45b4ab73280f4555c174606631e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStringTypeW
GetProcAddress
HeapReAlloc
VirtualAlloc
LoadLibraryA
GetOEMCP
GetACP
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
RtlUnwind
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetWindowTextA
GetClassNameA
ShowWindow
GetWindowRect
SetWindowPos
EnumWindows
Shell_NotifyIconA
?HookOff@@YAHXZ
?HookOn@@YAHXZ
?KeyboardProc@@YGJHIJ@Z
?SetBossKey@@YAXH@Z
?SetGobackKey@@YAXH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ