KeyboardProc
UnHook
installhook
Static task
static1
Behavioral task
behavioral1
Sample
426d630ae77920ee9bcfe3f25a408b0c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
426d630ae77920ee9bcfe3f25a408b0c_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
426d630ae77920ee9bcfe3f25a408b0c_JaffaCakes118
Size
1.4MB
MD5
426d630ae77920ee9bcfe3f25a408b0c
SHA1
5eb5c6d67584316a9a75a2d500a86116f8dcac48
SHA256
1a3b18e331b4f0f021676ac7c553109e8f10a34579c4937feb7eb941237f46f6
SHA512
36a20aae63f5dc856ed31482d5e39766b9b3117a0f6456de26a0ad7ef8d107521488097dd72e942668b8bcea93dfb180f34a59d5ac56d070eff01fc7234b3fa0
SSDEEP
24576:+KFbpIEXE4l0k3/Vhc0+lq2Tov0iA6CCKB0aQHsr0N6ty22X0c8TcBM0PDe0Xdd3:HbdE4l0k3/Vhc0+lq2Tov0iA6CCKB0a4
Checks for missing Authenticode signature.
resource |
---|
426d630ae77920ee9bcfe3f25a408b0c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
KeyboardProc
UnHook
installhook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ