DLL_GetProjectVersion
EnableAltInterception
EnableDiaryTracking
EnableNTInvisible
EnablePreHandle
EnableSpecialKeysLogging
SetHook
Static task
static1
Behavioral task
behavioral1
Sample
2d6f3ca486eef58c1215f27c6a4ff75b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d6f3ca486eef58c1215f27c6a4ff75b_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2d6f3ca486eef58c1215f27c6a4ff75b_JaffaCakes118
Size
8KB
MD5
2d6f3ca486eef58c1215f27c6a4ff75b
SHA1
18b42b68fd54c33a52ee2138423212218e2b6794
SHA256
d3ebfcbb3a900372eeefe792f0f6d0061dbd869727f19a559aee1399b0db8f05
SHA512
e6f06e08887770cd931e92c15b620f9fd580ebfe5a99b8646ba952f55ff095b37b46b5b7b786f8383062cc03f86cf87e9db719ff03fd9091db28fbaaf6f0bf98
SSDEEP
96:wcuBLQ4wNqCMSazNiz91eOdQPIiEuuXLPULrCBB6V4lb0wHzyvkOF51OqKdtr5jp:Q9wD/VaIiIrvBBBF+vkOb1nilo8EB8j
Checks for missing Authenticode signature.
resource |
---|
2d6f3ca486eef58c1215f27c6a4ff75b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpiA
lstrlenA
GetModuleFileNameA
GetModuleHandleA
GetSystemInfo
GetProcAddress
WriteProcessMemory
GetCurrentProcess
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LoadLibraryExW
WideCharToMultiByte
GetTickCount
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
UnhookWindowsHookEx
SetWindowsHookExA
GetDesktopWindow
CallNextHookEx
GetKeyboardLayout
GetWindowLongA
GetClassNameA
GetKeyState
GetWindowThreadProcessId
ToAsciiEx
GetFocus
PostMessageA
IsWindow
SendMessageA
GetKeyboardState
_onexit
_adjust_fdiv
malloc
_initterm
free
__dllonexit
DLL_GetProjectVersion
EnableAltInterception
EnableDiaryTracking
EnableNTInvisible
EnablePreHandle
EnableSpecialKeysLogging
SetHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ