InstallLaunchEv
unHook
Static task
static1
Behavioral task
behavioral1
Sample
44035d337422da1d7bffbf10464add57_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
44035d337422da1d7bffbf10464add57_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
44035d337422da1d7bffbf10464add57_JaffaCakes118
Size
11KB
MD5
44035d337422da1d7bffbf10464add57
SHA1
03c5f3ec6c12336d4c45639e1171845121d1d0b6
SHA256
b7ad9d7bd29e618b7cd2281aa6129d9186b24b11a63530c5b6bdc1e1a2b19ab1
SHA512
efd7cfa54b32cc01a22e56ffca2fc30a4de0156f26d9912e4986219f7055c0c9707448a54cb56823991c132e9bce55bcac01b6021bb1f91a2f2c17f79fe2c2af
SSDEEP
192:YHfhKJhYV3UZnVcEdTcSgkpTOa6c7g8mnpXZH:YkiVAnVcESSgk1OZC5C
Checks for missing Authenticode signature.
resource |
---|
44035d337422da1d7bffbf10464add57_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord2554
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord665
ord1979
ord6385
ord5186
ord354
ord6877
ord924
ord3337
ord2818
ord540
ord3811
ord1116
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord4486
ord6375
ord4274
ord800
ord4080
ord537
ord1255
ord6467
ord1578
ord600
ord826
ord269
__CxxFrameHandler
_EH_prolog
??2@YAPAXI@Z
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
_mkdir
LocalFree
OpenProcess
GetShortPathNameA
CloseHandle
LocalAlloc
GetWindowTextA
UnhookWindowsHookEx
GetWindowThreadProcessId
CallNextHookEx
SetWindowsHookExA
GetModuleFileNameExA
EnumProcessModules
PathIsDirectoryA
InstallLaunchEv
unHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ