HookOff
HookOn
Static task
static1
Behavioral task
behavioral1
Sample
f4c1cd8c503a0318838c888c5663f999_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4c1cd8c503a0318838c888c5663f999_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f4c1cd8c503a0318838c888c5663f999_JaffaCakes118
Size
32KB
MD5
f4c1cd8c503a0318838c888c5663f999
SHA1
9fea6fe1f23ce8524893a071bdb8297baa36fc66
SHA256
77e290efb0b4c657938c74fc4ee18ccf01d35b04765ce933c29b3a20efc33161
SHA512
e50c4840b51faba43e2efda2c26c1a0240e973cebc31e4229901a92d6d5cef4a8df23fa178f2d140e8ee7a078776c547cdb95575bba51ca2ecd50d6560d41bb1
SSDEEP
768:PeRqw1szv6/PzcHJOL9aQBqxIjCSvL9KQFL2jc:GRqw1sz6GILUQBqxIN9L
Checks for missing Authenticode signature.
resource |
---|
f4c1cd8c503a0318838c888c5663f999_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookOff
HookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ