DisableMouseHook
DllRegisterServ
EnableMouseHook
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
0a6eec153fa70b5aec05306d4f688d24_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0a6eec153fa70b5aec05306d4f688d24_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0a6eec153fa70b5aec05306d4f688d24_JaffaCakes118
Size
1.1MB
MD5
0a6eec153fa70b5aec05306d4f688d24
SHA1
71fc9e848671e5b313f4dfb7fec5f142a2e69808
SHA256
e55786ba1d50daaf614158817a1324a84b11c196b8ac81d204ee699b98b25352
SHA512
10a3854742905deec2112816a7c5df1098825107d77d985659b878f83b5a66de7e824094f51aa6b0be50dbd255f22ddd34c89221272a6cf87989c5b81e7307ae
SSDEEP
24576:oTneb46N97ATlDGxJBBuFIYrjbTWWgZ0JOZCVv0CnUoR+82dzqz4K2mXt7SRATjl:t3N97ATlDGxJBBuFIYrjbTWWgZ0JOZCH
Checks for missing Authenticode signature.
resource |
---|
0a6eec153fa70b5aec05306d4f688d24_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DisableMouseHook
DllRegisterServ
EnableMouseHook
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ