EndHook
StartHook
Static task
static1
Behavioral task
behavioral1
Sample
d1ba8051363c2a21e8cb61e69217fe6a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1ba8051363c2a21e8cb61e69217fe6a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d1ba8051363c2a21e8cb61e69217fe6a_JaffaCakes118
Size
582KB
MD5
d1ba8051363c2a21e8cb61e69217fe6a
SHA1
708522f1e3ea1a59b5325c48511c9c8e526c41df
SHA256
5963d9819be719506f52bc18e859924134175f1de3e900d0fa99f9c6bdc6dad6
SHA512
59310b87facc5e72f7f96d4ae58a176826bce941b464b64064a8fb201e3a816cbd352cbd5395a460b053eebc10887e816b081c76ff6e2e1488ebba80023a73b8
SSDEEP
12288:DqQYNqD7v6kQKDmkhUJhWWVVMCcLHB9NULoxGkg3HH5Kkmnt2YBJDV93pPgSX8cL:DlF7v63MhOEWPMCcLHB9iA7g3HH5KZtf
Checks for missing Authenticode signature.
resource |
---|
d1ba8051363c2a21e8cb61e69217fe6a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetModuleHandleA
GetProcAddress
SysFreeString
RegCloseKey
CharNextW
AlphaBlend
Pie
VerQueryValueW
IsEqualGUID
ImageList_Add
OpenPrinterW
EndHook
StartHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE