HookFunc
PrintToLog
SetClientVerdict
UnhookFunc
hc
Static task
static1
Behavioral task
behavioral1
Sample
fc68653f7d15a2fabb4811ab65199df1_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fc68653f7d15a2fabb4811ab65199df1_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fc68653f7d15a2fabb4811ab65199df1_JaffaCakes118
Size
384KB
MD5
fc68653f7d15a2fabb4811ab65199df1
SHA1
7d3f74f18995d07d99af93e6c56ed5813e9c9375
SHA256
c61c97413ccff29ef9e8a226bd1dc8c58657dc5a97ff9dba2cab2445be41949d
SHA512
ca664ac7ead07c6889e354f7ccad3f588aee918a43020474d77929548237d5b651345f439070938561529424a449432b5aaa54b5860f9b799c18b5372dfd1ee7
SSDEEP
6144:mcoDbN9kN1TmMsLwYbRoRL93THhOkZxmZ8ncvKNStuVcKYNTu:mckbN9amM5lNwSJUtuGKYNT
Checks for missing Authenticode signature.
resource |
---|
fc68653f7d15a2fabb4811ab65199df1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookFunc
PrintToLog
SetClientVerdict
UnhookFunc
hc
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE