DisableMouseHook
DllRegisterServ
EnableMouseHook
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
b886b376d50f7ee2217625cfc5b09470_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b886b376d50f7ee2217625cfc5b09470_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b886b376d50f7ee2217625cfc5b09470_JaffaCakes118
Size
1.1MB
MD5
b886b376d50f7ee2217625cfc5b09470
SHA1
c3773a6f26176189fe5bc2e1dddb70e6eacbe153
SHA256
08b9a31305abfda4eacea79919719f065cf0dc48e609c6583ec5b8ad03d1969e
SHA512
a07185b84c8f562632494cda49d12019e925b84d52cda6d29d074bd6e5b120f75fd7264af3a1defe3f14dac3f5882588ab9780eb98ce1abaee3351a67ffc4aa9
SSDEEP
24576:p4frsZ3OyjBv8jhSUK9By3oUG64Qij24LkicvUnnA:pLZz1EULHiobs5
Checks for missing Authenticode signature.
resource |
---|
b886b376d50f7ee2217625cfc5b09470_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DisableMouseHook
DllRegisterServ
EnableMouseHook
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ