GetCurrentKeyboardCount
_InstallFilter@8
_JournalProc@12
_MouseProc@12
_RemoveFilter@0
Static task
static1
Behavioral task
behavioral1
Sample
29dcd66deafc202d680670eae25af4d1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
29dcd66deafc202d680670eae25af4d1_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
29dcd66deafc202d680670eae25af4d1_JaffaCakes118
Size
32KB
MD5
29dcd66deafc202d680670eae25af4d1
SHA1
618b2c95dafb40d80c75c36cafcbe3285642a686
SHA256
ae5f6475a5585816536a17b246b70c30d1f615c2fff5f8ed6036369962ee1f92
SHA512
f7f4fd7422da3671f66ba3ad159648931f3129b3f94f6269c6d2985cb3e36dd15b21be039fa0e4f053cf33f6727b72b0d582df67384c270ef2521fb4df8195c0
SSDEEP
192:Ls/D9LOmBDPH6eM4r//O2lMg0wZkI1/bwDQShnS9qdt4P13/fXVPuQCSeKn:oD5BeGXWIDbWNnRK13/fXJVCS
Checks for missing Authenticode signature.
resource |
---|
29dcd66deafc202d680670eae25af4d1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyA
lstrlenA
GetProfileStringA
GetProfileIntA
GetPrivateProfileStringA
GetModuleHandleA
FindNextFileA
FindFirstFileA
lstrcatA
GetWindowsDirectoryA
DeleteFileA
GetProcAddress
CloseHandle
LocalAlloc
LocalFree
FindClose
wsprintfA
SetWindowsHookExA
UnhookWindowsHookEx
GetClassNameA
FindWindowA
GetActiveWindow
GetWindowThreadProcessId
GetParent
GetWindowTextA
EnumChildWindows
GetKeyNameTextA
GetKeyboardState
ToAscii
PostMessageA
CallNextHookEx
GetWindowLongA
RegQueryValueExA
RegOpenKeyExA
GetUserNameA
RegCloseKey
tmpnam
_unlink
_adjust_fdiv
_initterm
memset
free
strstr
_mbsstr
sscanf
fprintf
time
localtime
_chkesp
strcpy
fseek
ftell
rename
fputc
fgetc
_fcloseall
fopen
strlen
fread
fclose
malloc
fgets
GetCurrentKeyboardCount
_InstallFilter@8
_JournalProc@12
_MouseProc@12
_RemoveFilter@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ