EnHookWindow
UnHookWindow
aaaabbbbcccc
Static task
static1
Behavioral task
behavioral1
Sample
0000d9a3249d6ad58a4ee2d43d26a3bd_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0000d9a3249d6ad58a4ee2d43d26a3bd_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0000d9a3249d6ad58a4ee2d43d26a3bd_JaffaCakes118
Size
21KB
MD5
0000d9a3249d6ad58a4ee2d43d26a3bd
SHA1
805d4cb1f3312b9c07886db50d283f4e3652ecae
SHA256
92fa1574bcc5b28f3865ff1fccdd4e00fd9727f992ffdf095079ec4936848aba
SHA512
b746323b1f3a0d090e0e7fe87d30bb960016f42327aa3547bbba1d1df776ee333c0e28f97e6d390fad956dffeff4033b783f975182ae7fd58247731205c17a31
SSDEEP
384:V1yVlNjtU2eKlIG7f2wdTJQsh8v+BQJxUs6TwjJbzEZjevkA:VoVljBRiHJxUsqwjtEZjm
Checks for missing Authenticode signature.
resource |
---|
0000d9a3249d6ad58a4ee2d43d26a3bd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
UnHookWindow
aaaabbbbcccc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ