getActiveDesktop
getSpecials
getSplit
getWnd
Static task
static1
Behavioral task
behavioral1
Sample
110a55556adf8a42141879374ec5bd6b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
110a55556adf8a42141879374ec5bd6b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
110a55556adf8a42141879374ec5bd6b_JaffaCakes118
Size
44KB
MD5
110a55556adf8a42141879374ec5bd6b
SHA1
052a8105a51a7296a094467a956dcbf6e743e004
SHA256
f4b96010d5494a8c859b621c6c82b2665be2b2fbd72fca5ee08e129ea23a3542
SHA512
e9c346d1665d64d38c266799ab48f787735688937479a2eb7f4f60cb041f2a6f4f3fc9575b57c180768ef9ab46b6ea667297e2f1a0de70169bdc1ba5c0fe7a71
SSDEEP
768:6Q3v4LB/SqTpugVdMiHc6yhiuy8x8GoaoL09d3N70TAYtOU05tO:P/OBpTphV28c6ycuyUdoLed70TAYgUUt
Checks for missing Authenticode signature.
resource |
---|
110a55556adf8a42141879374ec5bd6b_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CallNextHookEx
NtClose
getActiveDesktop
getSpecials
getSplit
getWnd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE