HookKeyboard
Hooked
UnhookKeyboard
Static task
static1
Behavioral task
behavioral1
Sample
3a7ee3311c815ecf800c219a2509f690_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3a7ee3311c815ecf800c219a2509f690_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3a7ee3311c815ecf800c219a2509f690_JaffaCakes118
Size
305KB
MD5
3a7ee3311c815ecf800c219a2509f690
SHA1
64ad12df221d0c616a0339a5d356fe49c2bff13b
SHA256
14a5473d37421171ba185adf780873d8b9703d1190d24dd23ecc3c6b73032767
SHA512
a02f2b989c38236b4e7b30df5d81738fa2725ce531fc10026eb79641c3bcd9df2b3aee33c1f2aed7668b500f9bdbd3bdcd0d5331e44e949f4d52ba36ac9d7c63
SSDEEP
6144:pXwBdJ+5DSP5M+/TpHJPExhP3PMakOVdmQsT2PRuW8aA/Oqw:pXw30SP5MkJPE7vPMLO3W2PwWMvw
Checks for missing Authenticode signature.
resource |
---|
3a7ee3311c815ecf800c219a2509f690_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookKeyboard
Hooked
UnhookKeyboard
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ