HookOff
HookOn
StartHook
Static task
static1
Behavioral task
behavioral1
Sample
ed4fbd56a7f8fe802ff940054c084891_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed4fbd56a7f8fe802ff940054c084891_JaffaCakes118.dll
Resource
win10v2004-20231215-en
Target
ed4fbd56a7f8fe802ff940054c084891_JaffaCakes118
Size
24KB
MD5
ed4fbd56a7f8fe802ff940054c084891
SHA1
d734b2473771611b31274ab7789c4188e3c53e5c
SHA256
d828c0f01e50de80bd1f14518dda511223128e54ed1551bfc2a8aca34c570513
SHA512
356af3b9039bd974148c178631c0ce37abedb0cf430c39844b931f381efcf997c721d92237f603cf26df548ec8a255bc94c863061a2a08d65b19633a58222741
SSDEEP
384:bVxz0CRc3qd+16/QuyTb2nGCtyjVV1QMnbZPCPrDlFRhXjKpKyL7PAzp8Oqa8+D:ACRiqdSEQpTSttsVV1fbZPirD1hMLspV
Checks for missing Authenticode signature.
resource |
---|
ed4fbd56a7f8fe802ff940054c084891_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookOff
HookOn
StartHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ