EnHookWindow
SkipFireWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
0150cbf5652b641d8d94797c5f5e4203_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0150cbf5652b641d8d94797c5f5e4203_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0150cbf5652b641d8d94797c5f5e4203_JaffaCakes118
Size
20KB
MD5
0150cbf5652b641d8d94797c5f5e4203
SHA1
b59c48b0b25617c2253d0cb0e8dad46b7a99fbdf
SHA256
084641ffcc11762e961723dbb140fed950dae80abe6b6d981c7b8f3d74d62039
SHA512
d5ff3474b9aa00a3b88804127cf697de4a9e948d35e36db41ab53093587ac7e847c3a592ad3d164bfb6ee96400ca9493a16640ebf080e9a1871154c3084861d8
SSDEEP
384:VVPyZNjtU2m/ImL/AWswc+JfvZ9oaZMNFTkZSZj/K4zETViDZjfz:VtyZOxsFs3Z9olFTkZS1/KYETVMfz
Checks for missing Authenticode signature.
resource |
---|
0150cbf5652b641d8d94797c5f5e4203_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFireWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ