DXKHook
EXKHook
HexToString
MapGlobalData
Search
Static task
static1
Behavioral task
behavioral1
Sample
db6c2589671b332c4400699674880d3f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
db6c2589671b332c4400699674880d3f_JaffaCakes118
Size
2.5MB
MD5
db6c2589671b332c4400699674880d3f
SHA1
399ecd49f1954ae6c539bee2f87bc5f05e3bd291
SHA256
58234464b67045ea93af25e09b131c184c40832442de5672a73bac75dfee9149
SHA512
4d3d2212ee873123c43a9db6b032c36a156d52c90dda964a888a6e9e8e1ce06c73cec315b843867423aeb60b17419979869976debb5ddce66eba4d278a563a90
SSDEEP
49152:h6iFJ4jFsfni/av9riuSP2nS22lv4BYm9k47JBxv7s1gqDOiJCsY:h6iT9fnTjSeVqv4RL7nxv76/cz
Checks for missing Authenticode signature.
resource |
---|
db6c2589671b332c4400699674880d3f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DXKHook
EXKHook
HexToString
MapGlobalData
Search
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE