EnHookWindow
Skif4freW4ll
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
f1711cb8a9aa276efaa2f9008bf5379e_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f1711cb8a9aa276efaa2f9008bf5379e_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f1711cb8a9aa276efaa2f9008bf5379e_JaffaCakes118
Size
19KB
MD5
f1711cb8a9aa276efaa2f9008bf5379e
SHA1
95b1046531dba94af89c8e8982419b1cc361ff41
SHA256
c23c8dbfdc259f36584b4e3d53292e4b892a522f139a76db8681de00fd794ea2
SHA512
48be43469c1aaa137219c9702715b110a14c2eadc501dd3c1d26ca0b3f42ec442283a3315fccd4ce424b1e0831615580aefb3915f590fd3eb8812d39e41e8e09
SSDEEP
384:zOr5NKZ2S8ANHIInIhAXGPZWzHD4rp8O8sHjb4izEvMYYORM:ar5N8gPZWrD08O8sDBEv6J
Checks for missing Authenticode signature.
resource |
---|
f1711cb8a9aa276efaa2f9008bf5379e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
Skif4freW4ll
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ