EnHookWindowB
GetTickCountA
Static task
static1
Behavioral task
behavioral1
Sample
009dc8bbc9b6201a0326c0fa102a8c26_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
009dc8bbc9b6201a0326c0fa102a8c26_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
009dc8bbc9b6201a0326c0fa102a8c26_JaffaCakes118
Size
512KB
MD5
009dc8bbc9b6201a0326c0fa102a8c26
SHA1
e8d32afa2e0dfcfa5131ec43277cbae14e9ad7f0
SHA256
03ce5e282ba89df727a1b732e2361daf0ebbbef9016bcf37a5aa785b36dd2955
SHA512
44af263a88e473a25f6de46031519004c7d7d12ad972fb7c602765acae653ac197de18c70b178eb389f32aaf6b373c3560ed524d6dec89a0d0231d7cfa9dcb7e
SSDEEP
384:7PyZNjtU2m654MLfyHirLbqWhz6446KLI1fgkIjSZ7GEDRD1AzXnevd2sP:jyZ3T2Ydzh46KUf+m7p6Xne128
Checks for missing Authenticode signature.
resource |
---|
009dc8bbc9b6201a0326c0fa102a8c26_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindowB
GetTickCountA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ