HookProc
RunUI
Static task
static1
Behavioral task
behavioral1
Sample
49da394a45589cd1cfb6a890a4e08fcc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49da394a45589cd1cfb6a890a4e08fcc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
49da394a45589cd1cfb6a890a4e08fcc_JaffaCakes118
Size
38KB
MD5
49da394a45589cd1cfb6a890a4e08fcc
SHA1
04fda31013e283070043827a648dbb8190a0ece8
SHA256
80f38baaf4f90ad9bf3b87d578ac227c4ba88cc7c6ff974501040b42c272fdbc
SHA512
601e4b79d00ec10aabab259214b608b929863d12ee4bfad666e4ac8b2df707d78e2750c161e1477ca8dda44099092770d4ea976d8ba037deddda862dd08eccf7
SSDEEP
768:0VPWTLZzhKjV4YWG65jC03H3pbcq3YfNfPYDOfjd:DplaVPcRppbjAd
Checks for missing Authenticode signature.
resource |
---|
49da394a45589cd1cfb6a890a4e08fcc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
EnumProcessModules
SHSetValueA
TranslateMessage
CoCreateInstance
LoadRegTypeLi
HookProc
RunUI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE