CreateHardwareEventMoniker
DllInstall
DllRegisterServer
DllUnregisterServer
HardwareDetectionServiceMain
ThemeServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
50b85bd2e717636185191f150cec3919_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
50b85bd2e717636185191f150cec3919_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
50b85bd2e717636185191f150cec3919_JaffaCakes118
Size
73KB
MD5
50b85bd2e717636185191f150cec3919
SHA1
db4439eab16d80d5993b206899a68850ddbf0949
SHA256
7ee5bfeccf036116e646ea62e182e6150b41fd396324a9b886a4947dd1203bf6
SHA512
8cc4f7ff25fea75441c6312304cf32c5ea0d7d93ba7f3ac2fa686fc95ac746b0bf39a5bd042603ab05c801fa0667a97344a9cd021c0ae8cc51e3350f3c13a4e6
SSDEEP
1536:SnLOWoS0Fkx7AfUXKMpCJH1ppXdDZ6XpNGP+6i5JktEwNfQyFvCA2a:cOWoSOdfyxpCB1XFM5IPY5QeA2a
Checks for missing Authenticode signature.
resource |
---|
50b85bd2e717636185191f150cec3919_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
NtClose
GetAce
CloseDesktop
I_RpcBindingInqLocalClientPID
CreateHardwareEventMoniker
DllInstall
DllRegisterServer
DllUnregisterServer
HardwareDetectionServiceMain
ThemeServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE