GetMsgHookOff
GetMsgHookOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
f3d306d93b7647a950f829b2bd7f1822_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3d306d93b7647a950f829b2bd7f1822_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f3d306d93b7647a950f829b2bd7f1822_JaffaCakes118
Size
480KB
MD5
f3d306d93b7647a950f829b2bd7f1822
SHA1
12bac4025b7be209fcd28bfa929d42009548d8ab
SHA256
1201d269164c870f2857e106102e9696d7a052a3d3339c273b2d14a825fedd6d
SHA512
93b2410470ad27773b9f5b42e8b5b2f1f88419d53a29e2396d35e8b350d94b61b28ce7c0734d1933e80660f99a6dd719f4d257c43953720cf902db0464d29c34
SSDEEP
12288:adzUwPvntvU/GhqZuoNhNLRQSKAWfMXmJn:aBU6a2qZuoNhvgimJ
Checks for missing Authenticode signature.
resource |
---|
f3d306d93b7647a950f829b2bd7f1822_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetMsgHookOff
GetMsgHookOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ